Re: draft regarding fingerprinting guidance

On Apr 25, 2013, at 1:30 AM, Hannes Tschofenig <hannes.tschofenig@gmx.net> wrote:

> Here is the description we have added to 
> 
> http://tools.ietf.org/html/draft-iab-privacy-considerations-08
> 
> in response to the feedback from EFF at the Internet Privacy workshop: 
> 
>    $ Fingerprint:   A set of information elements that identifies a
>       device or application instance.
> 
>    $ Fingerprinting:   The process of an observer or attacker uniquely
>       identifying (with a sufficiently high probability) a device or
> 
>       application instance based on multiple information elements
>       communicated to the observer or attacker.  See [
> EFF].
>  
> I wonder whether you find these definitions useful. 



Hm, sorry, I should have reacted sooner.  I think a fingerprint reduces the size of the set of possible identities of the target.  That's a mouthful, for sure, but fingerprints remain used and useful even if the set size is not 1 (i.e. the fingerprint doesn't "identify" the target, as such).


David Singer
Multimedia and Software Standards, Apple Inc.

Received on Monday, 19 August 2013 17:28:44 UTC