[privacydir] Privacy Terminology: What are useful terms?

Hannes Tschofenig <hannes.tschofenig@gmx.net> Tue, 05 July 2011 10:49 UTC

Return-Path: <Hannes.Tschofenig@gmx.net>
X-Original-To: privacydir@ietfa.amsl.com
Delivered-To: privacydir@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9518521F8773 for <privacydir@ietfa.amsl.com>; Tue, 5 Jul 2011 03:49:06 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.599
X-Spam-Level:
X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eEMw+7E1CcEk for <privacydir@ietfa.amsl.com>; Tue, 5 Jul 2011 03:49:06 -0700 (PDT)
Received: from mailout-de.gmx.net (mailout-de.gmx.net [213.165.64.23]) by ietfa.amsl.com (Postfix) with SMTP id A53C521F876E for <privacydir@ietf.org>; Tue, 5 Jul 2011 03:49:05 -0700 (PDT)
Received: (qmail invoked by alias); 05 Jul 2011 10:49:04 -0000
Received: from unknown (EHLO [10.255.132.24]) [192.100.123.77] by mail.gmx.net (mp023) with SMTP; 05 Jul 2011 12:49:04 +0200
X-Authenticated: #29516787
X-Provags-ID: V01U2FsdGVkX19sqw8sf5psC8RSApCyy2F6e7zW59zXqXJjQIrZmA pUv87b2GIMNtm2
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0 (Apple Message framework v1084)
From: Hannes Tschofenig <hannes.tschofenig@gmx.net>
Date: Tue, 5 Jul 2011 13:48:59 +0300
Content-Transfer-Encoding: quoted-printable
Message-Id: <5821BF1F-0FEF-4C6C-89A5-3A33BDE4F843@gmx.net>
To: privacydir@ietf.org
X-Mailer: Apple Mail (2.1084)
X-Y-GMX-Trusted: 0
Subject: [privacydir] Privacy Terminology: What are useful terms?
X-BeenThere: privacydir@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: "Privacy Directorate to develop the concept of privacy considerations for IETF specifications and to review internet-drafts for privacy considerations." <privacydir.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/privacydir>, <mailto:privacydir-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/privacydir>
List-Post: <mailto:privacydir@ietf.org>
List-Help: <mailto:privacydir-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/privacydir>, <mailto:privacydir-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 05 Jul 2011 10:49:06 -0000

Hi all, 

You may have seen that the privacy terminology document over time got shorter and shorter as I removed content to make it more readable. Here is the latest version: 
http://tools.ietf.org/html/draft-hansen-privacy-terminology-02

It is still too long. Most IETF document authors are likely to use only a few terms. 

In a recent discussion in the IAB privacy program we were wondering what are the terms we absolutely need to have. Here are the terms I think could be useful for IETF document authors to know. 

1) Anonymity
2) Unlinkability
3) Unobservability
4) Pseudonym/Pseudonymity

Anonymity, unlinkability and pseudonymity are useful terms for many of the IETF's authentication protocols. The sub-categories of sender anonymity and relationship anonymity are more applicable to protocols like onion routing proposals. 
Unobservability shows up in the context of security protocols where dummy traffic is used to pad exchanged data.

Identity management is often touched in the work on architectures. While many of the entities have their own unique terms with each proposal there are some concepts that seem to be quite generic, such as 'identity', and 'identifier'. It may be useful to capture this aspect as well. 

From your experience, what other terminology is useful to have? 

Ciao
Hannes