[apps-discuss] Usability of draft-nottingham-safe-hint (was: Call For Adoption: draft-nottingham-safe-hint)

James M Snell <jasnell@gmail.com> Thu, 24 July 2014 02:46 UTC

Return-Path: <jasnell@gmail.com>
X-Original-To: apps-discuss@ietfa.amsl.com
Delivered-To: apps-discuss@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A31AE1A0AC4 for <apps-discuss@ietfa.amsl.com>; Wed, 23 Jul 2014 19:46:52 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Eywn-7h0DuWl for <apps-discuss@ietfa.amsl.com>; Wed, 23 Jul 2014 19:46:51 -0700 (PDT)
Received: from mail-oa0-x22e.google.com (mail-oa0-x22e.google.com [IPv6:2607:f8b0:4003:c02::22e]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 16F7E1A0151 for <apps-discuss@ietf.org>; Wed, 23 Jul 2014 19:46:51 -0700 (PDT)
Received: by mail-oa0-f46.google.com with SMTP id m1so2839534oag.19 for <apps-discuss@ietf.org>; Wed, 23 Jul 2014 19:46:50 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:from:date:message-id:subject:to:content-type :content-transfer-encoding; bh=yJ2mDWc2WsgAWFaVHRZ38Twy8ZpwhivlHt7oeu0wP7I=; b=OHSmR1t4JAr1Yt5c37gtXZ0BMmPf08Uk9LqjQuJHJEg4K2yS+bw6h5/LD9GmI87IuV IPuRcyZx7TvMvxzTYfEh+u3Xbv84bMWKqQRsLIJhXHKYAq8j4XYsM13KDl6cZCnlhswo jvm3utMR6tqdcy4n8bi2QupRcF7j8HqxVorsHF6/KLZhqvtiP27KcEWQ1jrSIrUgY94I tXyE+j654uGiLPqrqmDIvDFqLiEhT0vaHtBXEgqmY88qQ6DQHge5OWbPAp3yI4TJu+33 iDOGveTGrFBbc0crw7Tb4hvuq1mDIkEMNTAxywwL+Ncg/PTiQqO0NXS9Ku3bAbkT7U95 3OwQ==
X-Received: by 10.182.97.234 with SMTP id ed10mr7724787obb.31.1406170010294; Wed, 23 Jul 2014 19:46:50 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.60.179.81 with HTTP; Wed, 23 Jul 2014 19:46:30 -0700 (PDT)
From: James M Snell <jasnell@gmail.com>
Date: Wed, 23 Jul 2014 19:46:30 -0700
Message-ID: <CABP7RbeebKrbdJmpeY91ADtmW2ThVDF7yOZ7TUPj_eBaMfy1WQ@mail.gmail.com>
To: IETF Apps Discuss <apps-discuss@ietf.org>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: http://mailarchive.ietf.org/arch/msg/apps-discuss/JCiuzY1ZzvNRldwJ7XEmdCAETho
Subject: [apps-discuss] Usability of draft-nottingham-safe-hint (was: Call For Adoption: draft-nottingham-safe-hint)
X-BeenThere: apps-discuss@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: General discussion of application-layer protocols <apps-discuss.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/apps-discuss>, <mailto:apps-discuss-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/apps-discuss/>
List-Post: <mailto:apps-discuss@ietf.org>
List-Help: <mailto:apps-discuss-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/apps-discuss>, <mailto:apps-discuss-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 24 Jul 2014 02:46:52 -0000

Thinking about it further, this raises a great point: As currently
defined, "Prefer: safe" is actually quite useless because the
specification does not provide any basis upon which to determine
whether content is "objectionable" or not. The challenge is that it
attempts to address the problem in the wrong way.

Consider a school. It rolls out a bunch of tablets with the "Prefer:
safe" boolean option set. Two different students go to two different
websites, each of which say they support "Prefer: safe" but have two
entirely different interpretations of what the currently undefined
concept of "objectionable content" means. The result is that the
school ends up having to apply it's own filtering anyway, despite the
presence of the "Prefer: safe" option, making the use of "Prefer:
safe" pointless and meaningless beyond making someone feel good.

The problem lies in the fact that "safe" is not bound to any clear,
testable condition. For instance, we could say that a server honoring
the "Prefer: safe" preference SHOULD NOT return any images, videos or
textual content depicting sexually explicit or sexually related
subjects. That would be a testable behavior that could be expected to
be remain consistent across implementations. Without such a clear
definition of what "safe" means, the spec, as currently written, is
largely meaningless.

- James


---------- Forwarded message ----------
From: Karl Dubost <karl@la-grange.net>
Date: Wed, Jul 23, 2014 at 6:19 PM
Subject: Re: [apps-discuss] Call For Adoption: draft-nottingham-safe-hint
To: "Murray S. Kucherawy" <superuser@gmail.com>
Cc: IETF Apps Discuss <apps-discuss@ietf.org>



Le 22 juil. 2014 à 01:28, Murray S. Kucherawy <superuser@gmail.com> a écrit :
> This note begins a Call For Adoption for the above document to be adopted as an APPSAWG working group item.  The Call ends on August 8, 2014.

potential for ratholes discussions.
a "safe" preference is strongly attached to a cultural context.
Cultural contexts are related to groups and often physical access to
places with a notion of sealed environments.

A magazine stand will put some publications into a dedicated
environment (hidden, special room, etc) according to the law of the
country (or the province). The mechanism of enforcement is often done
through the barrier of a human person controlling the access. Same
thing for alcohol, tobacco, amusement park (height), etc.

Putting a label on the browser side is indeed a way to advertise that
you do not want to receive some type of content, but the issue is that
"safe" has no meaning with regards to the Web because the cultural
concepts associated with the word "safe" is highly dependent on the
community and geographical location of the person using the browser.

This document is likely to lead to long discussions, will not solve
anything in a satisfying way, will be abused in all the ways you can
imagine. It will be even a potential source of additional tracking for
ads businesses along "This person is probably religious or a child,
let send targeted ads."


--
Karl Dubost 🐄
http://www.la-grange.net/karl/

_______________________________________________
apps-discuss mailing list
apps-discuss@ietf.org
https://www.ietf.org/mailman/listinfo/apps-discuss