Re: [sfc] Benjamin Kaduk's Discuss on draft-ietf-sfc-serviceid-header-12: (with DISCUSS and COMMENT)

[[e-mail]]

Hi Ben, 

Thank you for checking. Fixed the nit. 

Focusing on this last one: 

> 
>    because such information should be available to very few network
>    operator personnel.  Furthermore, access to subscriber data
> usually
>    requires specific access privilege levels.  To maintain that
>    protection, an SF keeping operational logs should not log the
> content
>    of a Subscriber and Performance Policy Context Headers unless the
> SF
>    actually uses the content of these headers for its operation.
> [...]
> 
> It's not clear to me that "don't log it" would actually help all the
> way if it's "having the information available on the node at all is
> a legal violation" that is problem.  If it's only "operator access"
> that's the problem

[Med] Yes.  

, then the question of what kind of network
> capture/visibility processes are available and to which operator
> personnel, which is probably more detail than we want to get into at
> this point

[Med] Agree. The key message here for operators is to carefully check the access levels and avoid that some of the access rules are bypassed. 

, so I'm not entirely sure what the best option is.  (I'm
> also not entirely sure if this mechanism would be fit for purpose at
> all if the legal requirements prohibits "available at all on the
> node", but maybe that's not actually a relevant requirement.)
> 
[Med] The requirement is to control who can access the information, not the availability on a given node.  

Cheers,
Med

_________________________________________________________________________________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.

This message and its attachments may contain confidential or privileged information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.
Thank you.