Re: [apps-discuss] Webfinger

[Bjoern Hoehrmann <[e-mail]>]

* Paul E. Jones wrote:
>http://www.ietf.org/internet-drafts/draft-jones-appsawg-webfinger-00.txt

There:

   Suppose you meet somebody at a party and they provide you with their
   email address.  After the party, you decide to visit your new
   friend's blog to learn more about them.  How do you find it?  You
   could search for your friend's name on the Internet or on various
   social networking sites, but sometimes it is very hard to locate a
   person or information about a person with merely an email address or
   a name.

I believe the technical term for that is "cyberstalking". What are you
planning to do to ensure the draft properly addresses security, privacy,
and netiquette issues? Right now the document seems to omit the reasons
for why the finger protocol did not gain traction, which revolve around
privacy and social engineering security issues, does not discuss neti-
quette at all, just has a "if you don't like it, don't use it" remark
in the Security Considerations, and has an ironic "Author's Addresses"
section.
-- 
Björn Höhrmann · mailto:[e-mail] · http://bjoern.hoehrmann.de
Am Badedeich 7 · Telefon: [phone] · http://www.bjoernsworld.de
25899 Dagebüll · PGP Pub. KeyID: 0xA4357E78 · http://www.websitedev.de/