Home page logo
/

nanog logo nanog mailing list archives

Fed Bill Would Restrict Web Server Logs
From: "Jon R. Kibler" <Jon.Kibler () aset com>
Date: Tue, 14 Feb 2006 09:47:50 -0500

Message: 3
Date: Thu, 09 Feb 2006 00:14:23 -0800
From: Declan McCullagh <declan () well com>
Subject: [Politech] Delete web server logs, or get fined by the Feds?
        Ed Markey's new bill [fs]
To: politech () politechbot com
Message-ID: <43EAF9DF.2000602 () well com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed

I've posted the text here:
http://www.politechbot.com/docs/markey.data.deletion.bill.020806.pdf

A summary is here:
http://news.com.com/2100-1028_3-6036951.html
"A bill just announced in Congress would require every Web site operator 
to delete information about visitors, including e-mail addresses, if the 
data is no longer required for a "legitimate" business purpose.

An open question is whether Rep. Ed Markey's bill would require that 
Internet addresses be deleted by default from Apache and other web 
server logs. One reading is that it would be. But it's not clear whether 
an IP address falls under the definition of personal information.

This bill applies to anyone running a web site, including individuals 
and bloggers. So it's not just companies that have to worry.


Original posting from Declan McCullagh's PoliTech mailing list. Thought NANOGers would be interested since, if this 
bill passes, it would impact almost all of us. Just imagine the impact on security of not being able to login IP 
address and referring page of all web server connections!

Jon Kibler
-- 
Jon R. Kibler
Chief Technical Officer
A.S.E.T., Inc.
Charleston, SC  USA
(843) 849-8214




==================================================
Filtered by: TRUSTEM.COM's Email Filtering Service
http://www.trustem.com/
No Spam. No Viruses. Just Good Clean Email.


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]