Re: [perpass] Getting started...

[Dave Crocker <[e-mail]>]

>> The only thing to add to that for now is that since the kinds of
>> monitoring we're considering can be done at many layers, we should
>> not only be considering the web, or application layer or just
>> security protocols, but the full suite of protocols and areas in
>> which the IETF works.
>
> "Privacy by default" has, up to now, been a failure in the IETF.  As you
> pointed out things do not happen unless someone volunteers to do the
> work.  There has been a lack of volunteers.  I don't know why.  I don't
> know who is trying to fix that.


We probably should draw a bright line between basic, classic 
"confidentiality" mechanisms, versus whatever we mean by "privacy". 
(The IAB was explicit in not being willing to choose a specific 
definition for its RFC on the topic -- however we might want to settle 
on one, to assist technical guidance.)

Better confidentiality mechanisms (eg, content encryption) might 
facilitate better privacy, but keeping the two constructs clearly 
distinct will probably aid both group focus and clarity about the work 
when communicating to others.

d/

-- 
Dave Crocker
Brandenburg InternetWorking
bbiw.net