W3C home > Mailing lists > Public > ietf-http-wg@w3.org > July to September 2011

Re: DELETE and 410 Gone

From: Alexandre Morgaut <Alexandre.Morgaut@4d.com>
Date: Thu, 25 Aug 2011 18:08:07 +0200
To: Karl Dubost <karld@opera.com>
CC: Julian Reschke <julian.reschke@gmx.de>, J Ross Nicoll <jrn@jrn.me.uk>, httpbis Group <ietf-http-wg@w3.org>
Message-ID: <D603D00E-2CBE-4045-8249-15BB9DEB3A3D@4d.com>

On 25 août 2011, at 16:35, Karl Dubost wrote:

> Alexandre, Julian,
>
> Le 25 août 2011 à 09:10, Alexandre Morgaut a écrit :
>> This difference is an interesting piece of information to give to the user but for some privacy policy it might also be a lack of security.
>
> Ah! interesting. Tell us more.

In Europe there is a very important topic called in French "droit a l'oubli numérique"
A bit hard to translate... It means, if you have, or other have, put some of your private data on the Web, but later, you want/need this data to be removed, you should be able to do it. There is Lawers working hard on that. This requirement may aslo occur on public data.

Use cases:
 - change of identity of somebody, maybe a whole family for their security
 - someone is tagged by a third party on a picture and want this tag to be removed (the picture may be completly unrelated to the person like a porn or a racist picture just to give him a bad reputation)

The fact is that with some very google friendly URL anyone could try some manually constructed URL to know if something has be related to another

ex:
Someone told me this guy was member of this organization
I check

-> GET http://thisorganiztion.org/members/john-doe
<- 410 Gone HTTP1/1

If this wanted all his informations being removed from this organization website (he may not agree any more with its actions), here there is a problem...

Regards,




Alexandre Morgaut
Product Manager

4D SAS
60, rue d'Alsace
92110 Clichy
France

Standard : +33 1 40 87 92 00
Email :    Alexandre.Morgaut@4d.com
Web :      www.4D.com
Received on Thursday, 25 August 2011 16:08:51 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Friday, 27 April 2012 06:51:47 GMT