Re: [Asrg] C/R Framework

["Jon Kyme" <jrk@merseymail.com>]

> problem too. As I mentioned before, perhaps we should not store plain
> email
> addresses - but some form of checksum or something. Even though that is 
> susceptible to dictionary attacks, the attacker must know what he is 
> looking for. This will at least protect against people snooping at
> messages.
> 


I don't think it's necc. to specify what steps an implementer needs to take
to protect/hide the data - just an recommendation that they should take
steps is probably enough. Maybe?






--
_______________________________________________
Asrg mailing list
Asrg@ietf.org
https://www1.ietf.org/mailman/listinfo/asrg