[Fwd: WEBPRIV BOF for D.C. IETF]

FYI, there may be a separate BOF (in the User Services Area)
about Web Browsing and user privacy.

attached mail follows:

Folks,

Marcia and I (well, mostly Marcia) will be trying to cram into a slot
on the D.C. agenda for this BOF.  Larry is willing to run it.  FYI, and
stay tuned.

Thanks, Joyce

----- Begin Included Message -----


Subject: IETF Agenda Request: WEBPRIV

BOF Name: Web User Privacy: expectations and threats (WEBPRIV)
Area: USV (Apps)
Conflicts: HTTP, URLREG, IPP, FAX, 
Expected Attendance: 40

BOF description:

There are a number of methods in use that gather information about
users of products over the network. While many of these information
gathering methods are benign, the potential for abuse is quite large.
Popular reports of the privacy issues around web browsing have focused
on the issue of 'cookies': the use of the HTTP state management
mechanism to send information about the user to a third party. However,
there are a large number of other possible threats. For example,
software packages, when downloaded and installed, may send the user's
identification and other information directly to the maker of the
software package, in the name of 'helping' with the identification of
the user's configuration.

The goal of the BOF is canvas for interest in creating a guideline to
threats to user privacy and an enumeration of the mechanisms and
policies that are necessary to avoid such threats.