Re: [GNAP] Terminology PR

Fabien Imbault <fabien.imbault@gmail.com> Wed, 06 January 2021 22:20 UTC

Return-Path: <fabien.imbault@gmail.com>
X-Original-To: txauth@ietfa.amsl.com
Delivered-To: txauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 539703A1340 for <txauth@ietfa.amsl.com>; Wed, 6 Jan 2021 14:20:12 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.096
X-Spam-Level:
X-Spam-Status: No, score=-2.096 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hIywhfdp4sa1 for <txauth@ietfa.amsl.com>; Wed, 6 Jan 2021 14:20:10 -0800 (PST)
Received: from mail-io1-xd36.google.com (mail-io1-xd36.google.com [IPv6:2607:f8b0:4864:20::d36]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0B4D73A133A for <txauth@ietf.org>; Wed, 6 Jan 2021 14:20:10 -0800 (PST)
Received: by mail-io1-xd36.google.com with SMTP id w18so4259711iot.0 for <txauth@ietf.org>; Wed, 06 Jan 2021 14:20:09 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=uvXYsB0hHmEiXXlW060FuYlEA3Y/qrP4wKjTJA9MXRo=; b=kWWTgSJOmLqytICWnGswdd/80kPk0EUdSNr2khH7g3lwiaNT266brSegGQxIupymZY +qfzBgxtlfmm4X3RInw/tAUN2qXqHLDDsiTckgCrJwB03zMEp5Zg4qzrmjmP3Bp5lEI6 W9rrIL0zPtYQZAOgEAxg5velCO+SBRS++G6ExIn0DPGPQUAaQUOEVAVAxGwEqrD919Yy ostPXZPVIhb6UNDqG5PIVhWYq81cL99TZyyQf8kdj5njw5zF9T6hGW1PtbZeL7PzNQ/Y JoGk1IvQ4Yz+0c6mp4VYiMS55QdWrkFndFI9OEUyzFJipdmHYOzdiYsClVQ0+SyaR3oN n+Cw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=uvXYsB0hHmEiXXlW060FuYlEA3Y/qrP4wKjTJA9MXRo=; b=VdKf8asrCAW5uW59xPSDP8+RB2YswNWd+beL5mc8AmekciDtzC77AY6n3q1jIrcQkS Yv+pHkLRuFrMW4v8Whoybzk5s2J7hLt92B92zlIFEbN8Rs5wbUQxf00m4g0nM2uW4Ll5 XcU/t7QGP8YLgHmlo42eFBcHaoFucIkqEs+XBYlS8jBC0Zsnkq5b4tJeC8L++6ZiQqoC OC7bWCYz2gjO46Wrfb9vlhimpqD8EBR3s/oP6vWW2CouX0HENE0tlzKmUu9FFZZSD4ql oXZN3JoYMFTk4LtuFVGtQn7edA3z1SpOByibs7+MQkVBY2JpNpoECLNPo4J0Ca2w+aH8 gfRQ==
X-Gm-Message-State: AOAM530bk6FwjsByW41+j9IX3mHFYwh/k+KRk2h4wTR/aql3VKDLDl5Y MPlSiWlMr1uNAZdkM/g0gRIpsFLlcT24c98+weo=
X-Google-Smtp-Source: ABdhPJzTZ4XU9muW4uha7fGrscKswuLfWh9qL9U9fnYTm9K8aFYP32smRNw61zXD2FN87iB7XLOq2Ydx2kS6Jd0MG7w=
X-Received: by 2002:a6b:7a0c:: with SMTP id h12mr4483544iom.162.1609971609314; Wed, 06 Jan 2021 14:20:09 -0800 (PST)
MIME-Version: 1.0
References: <CAM8feuQyd6o_7zcs_O1KEbFkni1-c8BGdC57vQbukgVYavE5-Q@mail.gmail.com> <DAB2E8D3-DC9F-4502-8D6E-5BE2066AEF88@openconsent.com> <CAM8feuSaSeiSe7_T8BGEyQYDAd3PvUa-uO-rEDLcZPkos7KPbg@mail.gmail.com> <CAK2Cwb5J-hg7jEa78rRHgj68=tj5H5M6aW6JFYGsCG+SG5D52Q@mail.gmail.com> <CANYRo8i6uNTfaSb=tiMeaDKO_83m2EGtH0xr=sgkEHeOYyKCZw@mail.gmail.com> <CAK2Cwb5q8Xby825sCgjoa8Ub_eb2RjTSvNzPaytrB9QfVRU0hg@mail.gmail.com> <CAM8feuTJGGjFNNiX2OWVEg0RsfqR0apc0N8jy-BRwBREaD85OQ@mail.gmail.com> <CAK2Cwb7RrstFvPPHT5WUox_ahbrYf4dy4_pW3aawZKrOxjQxQQ@mail.gmail.com>
In-Reply-To: <CAK2Cwb7RrstFvPPHT5WUox_ahbrYf4dy4_pW3aawZKrOxjQxQQ@mail.gmail.com>
From: Fabien Imbault <fabien.imbault@gmail.com>
Date: Wed, 06 Jan 2021 23:19:56 +0100
Message-ID: <CAM8feuSJCdS2VDkh+U6zUhb_FOuH5v6QoCE7RmtyOHCbMHQ_dw@mail.gmail.com>
To: Tom Jones <thomasclinganjones@gmail.com>
Cc: Adrian Gropper <agropper@healthurl.com>, Mark Lizar <mark@openconsent.com>, GNAP Mailing List <txauth@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000df300b05b842b9ff"
Archived-At: <https://mailarchive.ietf.org/arch/msg/txauth/T7L3_EWm3H-RHtqnWucCacZuo_0>
Subject: Re: [GNAP] Terminology PR
X-BeenThere: txauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: GNAP <txauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/txauth>, <mailto:txauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/txauth/>
List-Post: <mailto:txauth@ietf.org>
List-Help: <mailto:txauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/txauth>, <mailto:txauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 06 Jan 2021 22:20:12 -0000

I don't think I spoke about subject data. I did speak about subject, as an
alternative to using either person/org/device.

We also already have subject information. Which is just really defined as a
statement about the subject. Is that what you call subject data here?

Le mer. 6 janv. 2021 à 23:16, Tom Jones <thomasclinganjones@gmail.com> a
écrit :

> you yourself brought up the problem. We do not know that the term "subject
> data" refers to.  My suggestion is to make subject plural.
> Peace ..tom
>
>
> On Wed, Jan 6, 2021 at 2:14 PM Fabien Imbault <fabien.imbault@gmail.com>
> wrote:
>
>> Adrian, welcome, always happy to see new people coming in.
>>
>> Tom, I agree this is a possibility but do we need that in the definition
>> itself (for a somewhat specific use case)? I don't see any loss of
>> generality in the current proposal.
>>
>> On Wed, Jan 6, 2021 at 11:08 PM Tom Jones <thomasclinganjones@gmail.com>
>> wrote:
>>
>>> you miss the point.  There can be more than one subject and more that
>>> one collection of subject data.
>>> Peace ..tom
>>>
>>>
>>> On Wed, Jan 6, 2021 at 1:52 PM Adrian Gropper <agropper@healthurl.com>
>>> wrote:
>>>
>>>> I'm new to the GNAP list so please forgive me as I get up to speed.
>>>>
>>>> RO is a role and the 'subject' of a piece of data is not. I don't see
>>>> any problem in keeping this distinction straight throughout the spec.
>>>>
>>>> - Adrian
>>>>
>>>> On Wed, Jan 6, 2021 at 4:27 PM Tom Jones <thomasclinganjones@gmail.com>
>>>> wrote:
>>>>
>>>>> Right - the correct term should be *subjects' information* as there
>>>>> are potentially two subjects, the RO and the "end-user" (really terribly
>>>>> confusing name). If you consider the case where the end-user is the parent
>>>>> of a child, or of their spouse, both subjects will be asked to supply
>>>>> information in order to be authenticated.
>>>>> Peace ..tom
>>>>>
>>>>>
>>>>> On Wed, Jan 6, 2021 at 5:20 AM Fabien Imbault <
>>>>> fabien.imbault@gmail.com> wrote:
>>>>>
>>>>>> Hi Mark,
>>>>>>
>>>>>> Thanks for the feedback.
>>>>>>
>>>>>> The original requirement for "subject" comes from the reference to
>>>>>> https://tools.ietf.org/html/draft-ietf-secevent-subject-identifiers-06
>>>>>> (used in the main text). The objective was to try to avoid various terms
>>>>>> which are synonyms.
>>>>>>
>>>>>> You're right, it's close to a legal entity, except from the fact that
>>>>>> it is defined more broadly (person, organization or device), which is
>>>>>> something we can encounter for the RO for instance.
>>>>>>
>>>>>> For instance we had previous discussions where the RO was defined as
>>>>>> :
>>>>>> "personal or organizational entity"
>>>>>> which I replaced in the latest draft by
>>>>>> "subject entity" (since it is defined)
>>>>>>
>>>>>> For "Subject Information", the question whether this refers to the
>>>>>> end-user or the RO is currently left open.
>>>>>>
>>>>>> Please let me know your thoughts.
>>>>>>
>>>>>> Cheers
>>>>>> Fabien
>>>>>>
>>>>>> On Tue, Jan 5, 2021 at 8:38 PM Mark Lizar <mark@openconsent.com>
>>>>>> wrote:
>>>>>>
>>>>>>> Hi Fabien,  et al,
>>>>>>>
>>>>>>> Great start!!
>>>>>>>
>>>>>>> Could you clarify the use and application of the term subject, as
>>>>>>> the term is used in some legal standards for semantics and I wonder if this
>>>>>>> is related to the legal semantic attribution of data subject.
>>>>>>>
>>>>>>> In the glossary,  it also seems the Subject Entity is referring to
>>>>>>> what is commonly know as legal entity.   And the term subject can refer to
>>>>>>> a few things at this technical level.— e.g.  a semantic term referencing in
>>>>>>> general the *topic* of the resource  or is it the* legal entity
>>>>>>> / credential *that corresponds to the accountable controller of a
>>>>>>> resource ?
>>>>>>>
>>>>>>> - Mark
>>>>>>>
>>>>>>> On 5 Jan 2021, at 08:04, Fabien Imbault <fabien.imbault@gmail.com>
>>>>>>> wrote:
>>>>>>>
>>>>>>> Hi everyone,
>>>>>>>
>>>>>>> I wish you all a happy new year.
>>>>>>>
>>>>>>> I just created a PR (
>>>>>>> https://github.com/ietf-wg-gnap/gnap-core-protocol/pull/155) that
>>>>>>> takes into account the various feedbacks. The automatic build process is
>>>>>>> not working, but you can see the diffs and build the html locally if you
>>>>>>> prefer. The definitions have also been updated on the wiki (
>>>>>>> https://github.com/ietf-wg-gnap/gnap-core-protocol/wiki/Terminology)
>>>>>>> if you prefer to check there.
>>>>>>>
>>>>>>> Feedbacks welcome before we move to pending merge later on.
>>>>>>>
>>>>>>> Cheers
>>>>>>> Fabien
>>>>>>> --
>>>>>>> TXAuth mailing list
>>>>>>> TXAuth@ietf.org
>>>>>>> https://www.ietf.org/mailman/listinfo/txauth
>>>>>>>
>>>>>>>
>>>>>>> --
>>>>>> TXAuth mailing list
>>>>>> TXAuth@ietf.org
>>>>>> https://www.ietf.org/mailman/listinfo/txauth
>>>>>>
>>>>> --
>>>>> TXAuth mailing list
>>>>> TXAuth@ietf.org
>>>>> https://www.ietf.org/mailman/listinfo/txauth
>>>>>
>>>>