Re: Geopriv compromise proposal

I would like to share my personal opinion about this,…

I think that almost everyone sees the value in allowing users to
express their will about how their location should be used. Probably
the discussions revolve mainly around the idea of having this feature
inside the Geolocation spec.

I think that the ability of expressing user’s will about the personal
data they send shouldn’t be specific for Geolocation or any other API,
this should be something generic that could be bound to any Web
request but not to the message content. The same policy format could
be used for location, form filling, banking or any other transaction
where sensitive information is sent. Think about it, all the privacy
fields that are considered a must in our discussions – “allow
retransmission”, “store duration”... – are not specifically related to
location data.

Maybe W3C should start thinking about a generic policy framework to do
that. It would make the difference between location services: in the
same way that no one accesses a banking system without using SSL,
users would prefer to use a location service where this hypothetical
framework would be available. Since it would be generic, policy data
would be bound to the request (Http headers, multipart message, etc…)
not to the information itself.

Doesn’t this make sense?

Angel

Received on Wednesday, 17 June 2009 11:55:28 UTC