Re: [ietf-privacy] Privacy and Identifiers - draft-moonesamy-privacy-identifiers-01

[Avri Doria <[e-mail]>]

On 17 Sep 2013, at 07:56, <[e-mail]> <[e-mail]> wrote:

> One comment I have when reading this reco from your draft:
> 
>      It is recommended that an identifier be used at the layer at which
>      its functionality is necessary for communication to be
>      established.
> 
> is, from a privacy perspective, there is no justification for it


I think it is an extension of the principle, that information should only used for the purpose for which it was collected, or in this case included in the packet.  In order to make privacy abuse more difficult each layer should be as privacy enhancing as possible.

While it is true that some information needs to be sent to another layer to support that layers basic functions, this should be kept to a minimum needed for functionality.  and and I can't think of a reason ever for information to be used at layer+-2 unless specifically pased by layer+-1.

avri