Re: IETF privacy policy - update

Martin Rex <mrex@sap.com> Fri, 09 July 2010 03:43 UTC

Return-Path: <mrex@sap.com>
X-Original-To: ietf@core3.amsl.com
Delivered-To: ietf@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6AF5D3A6B5D for <ietf@core3.amsl.com>; Thu, 8 Jul 2010 20:43:50 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -8.024
X-Spam-Level:
X-Spam-Status: No, score=-8.024 tagged_above=-999 required=5 tests=[AWL=-0.376, BAYES_50=0.001, HELO_EQ_DE=0.35, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UI-tie4JQwu2 for <ietf@core3.amsl.com>; Thu, 8 Jul 2010 20:43:49 -0700 (PDT)
Received: from smtpde02.sap-ag.de (smtpde02.sap-ag.de [155.56.68.140]) by core3.amsl.com (Postfix) with ESMTP id 486033A67B5 for <ietf@ietf.org>; Thu, 8 Jul 2010 20:43:49 -0700 (PDT)
Received: from mail.sap.corp by smtpde02.sap-ag.de (26) with ESMTP id o693hlf0004658 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Fri, 9 Jul 2010 05:43:52 +0200 (MEST)
From: Martin Rex <mrex@sap.com>
Message-Id: <201007090343.o693hkxc001533@fs4113.wdf.sap.corp>
Subject: Re: IETF privacy policy - update
To: jmabdp@gmail.com
Date: Fri, 09 Jul 2010 05:43:46 +0200
In-Reply-To: <AANLkTil6c3toAAkHJ814LPV82uVs8wv_1WKPigBCoJBY@mail.gmail.com> from "jean-michel bernier de portzamparc" at Jul 8, 10 09:05:34 pm
MIME-Version: 1.0
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 8bit
X-Scanner: Virus Scanner virwal05
X-SAP: out
Cc: ietf@ietf.org
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
Reply-To: mrex@sap.com
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ietf>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 09 Jul 2010 03:43:50 -0000

jean-michel bernier de portzamparc wrote:
> 
> However, from our own JEDI's (so-labelled "Jefsey's disciples") experience I
> would suggest some kind of "ietf privacy netiquette". It could be equivalen
> to architectural quotes like "dumb network", "end to end", "protocol on the
> wire", "rough consensus", etc. It could be added to the Tao.

+1

The IETF used to be an organization running on respect for the
guidance provide by their leaders.

Policies and their enforcement are means of control for rulers/government
in the absence of respect.


A written down privacy policy does not define what is acceptable,
it can only define what is compliant (with that policy).

"Acceptable" means different things to different people.

Someone suggested we could start with the privacy policy from
Google and work from there, but forgot the Sarcasm tags.

On my scale, Google is a serious and probably the largest privacy
offender world-wide.  example: "Google Street View"


I'm also being a little confused about seeing a solution
(a privacy policy draft) being proposed before there is consent
on what exactly is the problem that should be solved and whether
it is really worth solving.

I might have missed it, but all I remeber about the problem
being stated was "we don't have such a document, but almost everybody
else has one".

But for solving the "lack of paper" problem, a document with a neat title
"IETF Privacy Policy", and a crisp content "We care."
might be equally sufficient.


-Martin