[XCON] CPCP Issue 30: Unauthenticated Identities

[hisham.khartabil at nokia.com]

The <id> element in <identity> element refers to authenticated users only

The issues were:

Do we need to list users that do not need to be authenticated? For example: User bob at example.com can join a conference, but he does not need to be authenticated? So anyone claiming to be Bob can join?

If we allow such a thing, how many Bobs do we allow? I.e. How many are allowed to claim to be Bob and can join?

There was a strong objection against allowing such a thing since it does not make sense to base rules on identities that are not authenticated.

Regards,
Hisham

_______________________________________________
XCON mailing list
XCON at ietf.org
https://www1.ietf.org/mailman/listinfo/xcon