Overview of Best Email DNS-Based List (DNSBL) Operational Practices
RFC 6471

[Ballot discuss]
This document is not a BCP, yet it claim to document "best practices",
  Should the IESG ask the IRSG to chose a phrase that will have less
  likelihood of being confused with a BCP?

[Ballot comment]
I was surprised that this document did not seek to make any disclaimer wrt the legality of applying blacklists beyond the scope of entirely private systems. I would not want the IRTF to appear to condone practices that may be of dubious legality in some jurasditctions.

[Ballot comment]
Overall I think this is a helpful set of guidelines. Herewith a few comments.

1. I concur with the DISCUSS from Russ Housley. Note that Sections 1.2
and 3.6.1 include the term "BCP".

2. The abstract states:

  This document is a product of the Anti-Spam Research Group and
  represents the consensus of that group.

Section 1.4 states:

  NOTE:  This document is a product of the Anti-Spam Research Group
      (ASRG) of the IRTF.  As per section 3 of [RFC2014] IRTF groups do
      not require consensus to publish documents.  Therefore readers
      should be aware that this document does not necessarily represent
      the consensus of the entire ASRG.

Those two statements appear to be in conflict.

3. With regard to DoS attacks, consider adding a reference to RFC 4732.

4. The security considerations seem a bit thin to me given that DNSBLs
are used in ways different from "normal" DNS servers (e.g., RFC 3833 talks
about denial of service attacks on DNS servers, but not malicious use of
DNS-based services to poison the behavior of email servers and the like).

5. Please expand relevant acronyms on first use and provide appropriate
citations (e.g., "IRC").

[Ballot discuss]
This document is not a BCP, yet it claim to document "best practices",
  Should the IESG ask the IRSG to chose a phrase that will have less
  likelihood of being confused with a BCP?