Re: [sacm] [sacmwg/draft-ietf-sacm-information-model] remove the terms identification, identity, identifying (#21)

[Henk Birkholz <[e-mail]>]

Are there explicit pointers to the referenced thoughts posted?

Although the term identity allows for "Group identities", the SACM WG wants to refer to a specific target endpoint. If there is a NEA client or SACM component located on that target endpoint that is not a complicated task (assuming that that software component can provide guaranties about its authenticity). If a target endpoint is not "owned" by the domain, observation and profiling and resulting target endpoint characterization record might be the only way to refer to that target endpoint in the end.

I.e., keeping track of target endpoints that you "do not own" can be very privacy sensitive. In consequence, I would propose to refrain from using the terms identification and identity at least in that context ("not owned by you"). We should quickly create consensus in regard to this topic. 

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/sacmwg/draft-ietf-sacm-information-model/issues/21#issuecomment-292206358