RE: [Nea] Re: Requirements specifications

["Nelson, David" <dnelson at enterasys.com>]

Keith Moore writes ...

> I'm very concerned about user privacy, and I don't accept as an axiom
> that the host can consent to searches that impact the user.

But you just now suggested as a requirement:

> 1. NEA MUST NOT expose information about a host to any party 
> other than the owner of that host. (and a host has at most one owner)

Are we conflating owner and user?

I agree that it is the owner that should be making the decision to
provide information.  In the enterprise environment the owner is almost
always the IT department and the user is an individual employee.

Are you suggesting that, in an enterprise environment, the owner (IT) or
the user (employee) should be setting the information export policy for
the host?


_______________________________________________
Nea mailing list
Nea at ietf.org
https://www1.ietf.org/mailman/listinfo/nea