Re: [Gen-art] Gen-ART Last Call review of draft-ietf-appsawg-acct-uri-03

Peter Saint-Andre <psaintan@cisco.com> Wed, 06 March 2013 17:39 UTC

Mime-Version: 1.0 (Apple Message framework v1283)
Content-Type: text/plain; charset="iso-8859-1"
From: Peter Saint-Andre <psaintan@cisco.com>
In-Reply-To: <CALaySJ+W=PEeuEKzGeiCCG+pg2RncbmW4e4Uv_PrtYu0hVtjGw@mail.gmail.com>
Date: Wed, 06 Mar 2013 10:39:32 -0700
Content-Transfer-Encoding: quoted-printable
Message-Id: <899A7848-FABF-443D-8337-C02CF80728DE@cisco.com>
References: <ABCAA4EF18F17B4FB619EA93DEF7939A09CF57@eusaamb107.ericsson.se> <A0B59580-A3C0-4182-8348-5052D16FC6C7@cisco.com> <CALaySJ+W=PEeuEKzGeiCCG+pg2RncbmW4e4Uv_PrtYu0hVtjGw@mail.gmail.com>
To: Barry Leiba <barryleiba@computer.org>
Cc: "gen-art@ietf.org" <gen-art@ietf.org>, "draft-ietf-appsawg-acct-uri.all@tools.ietf.org" <draft-ietf-appsawg-acct-uri.all@tools.ietf.org>
Subject: Re: [Gen-art] Gen-ART Last Call review of draft-ietf-appsawg-acct-uri-03
Precedence: list

On Mar 6, 2013, at 10:02 AM, Barry Leiba wrote:

>>> [Page 5] Section 5, "..access to personally identifying information..", do
>>> you mean "..access to identifiable personal information" ?
>> 
>> Looking at draft-iab-privacy-considerations, I think "personal data" might
>> be best.
> 
> Maybe.  But "PII" is a term of art, and it means something different
> to (and more specific than) "personal data".  I'm not sure whether the
> change is the right answer in the full context of the paragraph:
> 
>   Protocols that make use of 'acct' URIs are responsible for defining
>   security considerations related to such usage, e.g., the risks
>   involved in dereferencing an 'acct' URI and the authentication and
>   authorization methods that could be used to control access to
>   personally identifying information associated with a user's account
>   at a service.
> 
> I suppose, as I mull it over, that changing to "personal data"
> probably *is* right.  But people should speak up if they think
> otherwise.

Yes, I think "personal data" is what we really mean here, not personally identifiable information (such as IP addresses and mother's maiden name).

Peter

[Gen-art] Gen-ART Last Call review of draft-ietf-… Meral Shirazipour
Re: [Gen-art] Gen-ART Last Call review of draft-i… Peter Saint-Andre
Re: [Gen-art] Gen-ART Last Call review of draft-i… Meral Shirazipour
Re: [Gen-art] Gen-ART Last Call review of draft-i… Barry Leiba
Re: [Gen-art] Gen-ART Last Call review of draft-i… Peter Saint-Andre
Re: [Gen-art] Gen-ART Last Call review of draft-i… Jari Arkko