W3C home > Mailing lists > Public > public-dxwg-wg@w3.org > March 2019

Re: [dxwg] Privacy concern with profile negotiation (#782)

From: Annette Greiner via GitHub <sysbot+gh@w3.org>
Date: Fri, 01 Mar 2019 18:43:35 +0000
To: public-dxwg-wg@w3.org
Message-ID: <issue_comment.created-468767888-1551465814-sysbot+gh@w3.org>
This is what I see in the ED: "The use of HTTP to negotiate and transport implies that all privacy and security issues that are relevant for that protocol are also relevant for profile negotiation. E. g., information such as user agent, accept-headers, IP address etc. can potentially be used as identifying information, and particularly, the IP address adds information about geolocation and institutional membership. Apart from that, there are no known security or privacy impacts of this feature. " 
That suggests that profiles add no new privacy concerns over existing HTTP headers.

-- 
GitHub Notification of comment by agreiner
Please view or discuss this issue at https://github.com/w3c/dxwg/issues/782#issuecomment-468767888 using your GitHub account
Received on Friday, 1 March 2019 18:43:37 UTC

This archive was generated by hypermail 2.3.1 : Monday, 29 April 2019 13:45:08 UTC