[Nea] Re: Requirements specifications

["Alan DeKok" <aland at deployingradius.com>]

Keith Moore <moore at cs.utk.edu> wrote:
> >   To re-phrase that, NEA can permit such searches only with the
> > consent of the end host. 
...
> I'm very concerned about user privacy, and I don't accept as an axiom 
> that the host can consent to searches that impact the user.

  To be pedantic, the user doesn't consent to anything.  The user
naively belives that the information the host presents to him is
accurate, and the the host is doing something related to what he
instructs it to do.

  Users don't take actions on networks.  Computers do.

  The end host decides if the user has consented to something, usually
by asking for input.  Other hosts on the network don't see users, they
see hosts.  For all practical network-related purposes, hosts consent
to actions, users don't.

  It is still good to talk about users, of course, but only in so far
as their relationship with the end host.  Do they trust it?  Do they
own it?  Do they control it?

  Alan DeKok.
--
  http://deployingradius.com       - The web site of the book
  http://deployingradius.com/blog/ - The blog

_______________________________________________
Nea mailing list
Nea at ietf.org
https://www1.ietf.org/mailman/listinfo/nea