Re: [dxwg] Privacy concern with profile negotiation (#782)

This is what I see in the ED: "The use of HTTP to negotiate and transport implies that all privacy and security issues that are relevant for that protocol are also relevant for profile negotiation. E. g., information such as user agent, accept-headers, IP address etc. can potentially be used as identifying information, and particularly, the IP address adds information about geolocation and institutional membership. Apart from that, there are no known security or privacy impacts of this feature. " 
That suggests that profiles add no new privacy concerns over existing HTTP headers.

-- 
GitHub Notification of comment by agreiner
Please view or discuss this issue at https://github.com/w3c/dxwg/issues/782#issuecomment-468767888 using your GitHub account

Received on Friday, 1 March 2019 18:43:37 UTC