"Heightened Privacy Mode" Spec

Hi PING folks,

I initially committed to getting a more formal version of the “Heightened Privacy Mode” spec written up and ready for discussion next Thursday.  However, at the AC meeting, it seemed like there was a surprisingly positive reception to the idea of requiring privacy mitigations in standards to be normative; and that the current anti-practice of making the privacy-risking functionality normative, but the mitigations non-normative has been a bad idea.

It further seemed that there was (some? much?) greater openness to the idea of not “allowing” specs to go forward if they had privacy harms, when all normative sections were considered together. 

If others share the same read of the room, then I think my "Heightened Privacy Mode” spec might be a strategic misstep right now, since the proposal's main goal is to make it easier to write normative mitigations in specs.

Would greatly appreciate others thoughts on this.  I’m happy to semi-formalize the proposal by Monday of next week (it wouldn't take long), but would like to know if others others share the sense that it’d be a strategic mistake right now.

Best,
Pete

Received on Wednesday, 10 April 2019 18:24:22 UTC