Re: [apps-discuss] Webfinger discussion

I agree it would be useful to add text about sharing information that might
be dynamic in nature (e.g., current user location).

We'll add text along those lines to the next draft.  Any other security
considerations we should note?

Paul

> -----Original Message-----
> From: apps-discuss-bounces@ietf.org [mailto:apps-discuss-bounces@ietf.org]
> On Behalf Of Andrew Sullivan
> Sent: Tuesday, March 27, 2012 4:47 AM
> To: apps-discuss@ietf.org
> Subject: Re: [apps-discuss] Webfinger discussion
> 
> On Mon, Mar 26, 2012 at 02:31:30PM -0400, Bob Wyman wrote:
> 
> > un-recommended!). If people did, in fact, use WebFinger to record such
> > stuff, the concerns you mentioned would be relevant. Thus, it might
> > make sense for the Security Considerations section to suggest that one
> > should think carefully before using WebFinger to provide such dynamic
> information.
> 
> Right, that's most of what I was trying to say.  I do have a concern that
> collecting a bunch of different information about a given person and
> linking it together in a single, easy to access repository has some
> potential security side effects (not just privacy ones, but those too, of
> course) that are not clearly highlighted in the security considerations.
> I suppose one could argue that facebook's (or pick your poison) user
> population shows nobody cares about that, but I think it would still be
> good to have some observations about those effects.
> 
> Best,
> 
> A
> 
> --
> Andrew Sullivan
> ajs@anvilwalrusden.com
> _______________________________________________
> apps-discuss mailing list
> apps-discuss@ietf.org
> https://www.ietf.org/mailman/listinfo/apps-discuss