[Sipping] Re: Consent framework comments

[Gonzalo Camarillo <[e-mail]>]

Hi Markus,

thanks for the comments. Answers inline:

 > So, would it be possible to have consent policies
> like this: - Any translation created by User X, using factory URI Y;
> or even - Any translation created by User X in domain Y

Yes, we need to discuss the format of the permission documents. We want 
something simple but with enough expresiveness to cover the main 
scenarios where consent is useful.

> Perhaps even things like SAML should be
> investigated for giving permissions.

In principle, we were thinking of a simple XML schema explicitly 
designed for consent, but it may be worthwhile exploring other 
alternatives as well, as you suggest.

The initial proposal was something like this:

    <target>
       <identity>
              <id>[e-mail]</id>
       </identity>
     </target>
     <sender>
       <identity>
         <any-identity/>
       </identity>
     </sender>
     <recipient>
       <identity>
         <id>[e-mail]</id>
       </identity>
     </recipient>
     <operations>
         <any-method/>
     </operations>

> what can be done about domains that do not
> enforce this type of policies?

I think this is indeed an interesting discussion to have... not so 
relevant to this draft at this point, though.

> While this is not required for the draft, it would be good to list
> for SIPPING WG what kind of Standards Track RFCs should be generated
> to actually build a working consent system out of the framework, so
> that these pieces can be chartered and work started/distributed.

Yes, we will coordinate these efforts with the SIP/SIPPING chairs and 
the AD.

Thanks,

Gonzalo

_______________________________________________
Sipping mailing list  https://www1.ietf.org/mailman/listinfo/sipping
This list is for NEW development of the application of SIP
Use [e-mail] for questions on current sip
Use [e-mail] for new developments of core SIP