[ietf-privacy] Privacy Considerations Document

"Tschofenig, Hannes (NSN - FI/Espoo)" <hannes.tschofenig@nsn.com> Wed, 16 March 2011 11:15 UTC

Return-Path: <hannes.tschofenig@nsn.com>
X-Original-To: ietf-privacy@core3.amsl.com
Delivered-To: ietf-privacy@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 596E63A696F for <ietf-privacy@core3.amsl.com>; Wed, 16 Mar 2011 04:15:10 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.535
X-Spam-Level:
X-Spam-Status: No, score=-106.535 tagged_above=-999 required=5 tests=[AWL=0.064, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jfk8-pGZ-EG0 for <ietf-privacy@core3.amsl.com>; Wed, 16 Mar 2011 04:15:09 -0700 (PDT)
Received: from demumfd001.nsn-inter.net (demumfd001.nsn-inter.net [93.183.12.32]) by core3.amsl.com (Postfix) with ESMTP id 4C3493A6967 for <ietf-privacy@ietf.org>; Wed, 16 Mar 2011 04:15:09 -0700 (PDT)
Received: from demuprx016.emea.nsn-intra.net ([10.150.129.55]) by demumfd001.nsn-inter.net (8.12.11.20060308/8.12.11) with ESMTP id p2GBGXk2017329 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK) for <ietf-privacy@ietf.org>; Wed, 16 Mar 2011 12:16:33 +0100
Received: from demuexc025.nsn-intra.net (demuexc025.nsn-intra.net [10.159.32.12]) by demuprx016.emea.nsn-intra.net (8.12.11.20060308/8.12.11) with ESMTP id p2GBGUCK018738 for <ietf-privacy@ietf.org>; Wed, 16 Mar 2011 12:16:33 +0100
Received: from FIESEXC015.nsn-intra.net ([10.159.0.23]) by demuexc025.nsn-intra.net with Microsoft SMTPSVC(6.0.3790.4675); Wed, 16 Mar 2011 12:16:29 +0100
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Date: Wed, 16 Mar 2011 13:19:29 +0200
Message-ID: <3D3C75174CB95F42AD6BCC56E5555B4504006033@FIESEXC015.nsn-intra.net>
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Thread-Topic: Privacy Considerations Document
Thread-Index: AcvjzAR3p3yGoeMcSuaADwVJtvoTwA==
From: "Tschofenig, Hannes (NSN - FI/Espoo)" <hannes.tschofenig@nsn.com>
To: ietf-privacy@ietf.org
X-OriginalArrivalTime: 16 Mar 2011 11:16:29.0779 (UTC) FILETIME=[992B0230:01CBE3CB]
Subject: [ietf-privacy] Privacy Considerations Document
X-BeenThere: ietf-privacy@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Internet Privacy Discussion List <ietf-privacy.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/ietf-privacy>, <mailto:ietf-privacy-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ietf-privacy>
List-Post: <mailto:ietf-privacy@ietf.org>
List-Help: <mailto:ietf-privacy-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf-privacy>, <mailto:ietf-privacy-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 16 Mar 2011 11:15:10 -0000

Hi all, 

We have also updated the "Privacy Considerations for Internet Protocols"
document:
http://tools.ietf.org/html/draft-morris-privacy-considerations-03

There are still a couple of questions about the content of the document,
including what level of background on privacy is needed for engineers in
their work to write a privacy considerations section. For the moment, I
have moved the historical treatment of privacy into the appendix of the
document. The Fair Information Practices, which are listed in that part
of the section, seem at the beginning to be essential but on the other
hand they do not provide helpful guidance for engineers. 

The current approach is to focus on a list of questions that protocol
designers should ask themselves. Those questions are listed in Section
4. 

I have tried to apply these guidelines in my writeup of the "ABFAB
Architecture" document, a recently started effort in the IETF with
relevance to privacy:
http://tools.ietf.org/html/draft-lear-abfab-arch-02

If you have suggestions for additional guidance I would like to hear
them. 

Ciao
Hannes