Re: Review of rtcweb IP Address Handling Recommendations

Thank you Justin, Adam, Wendy and to others in RTCWeb, WebRTC and PING. These are not easy issues.

It is really rewarding to see privacy concerns being addressed through the protocol development process.

Kind regards,
Christine (PING co-chair)

> On 29 Mar 2016, at 5:50 AM, Justin Uberti <juberti@google.com> wrote:
> 
> +Adam
> 
> Credit to Adam Roach who provided helpful feedback on these areas in his document review.
> 
> On Mon, Mar 28, 2016 at 12:53 PM, Wendy Seltzer <wseltzer@w3.org> wrote:
> Hi PING and Justin,
> 
> At the last PING call, I indicated I would look into Justin Uberti's
> IETF draft, https://tools.ietf.org/html/draft-ietf-rtcweb-ip-handling-01
> 
> The primary concern I had in the previous draft, a statement that IP
> information was being compared with mic/camera permissions and deemed
> less "sensitive," has been removed, and replaced with a more nuanced
> acknowledgment that privacy concerns may differ among differing users of
> the Web and rtcweb. Moreover, the document now recommends that IP
> address be included explicitly in the permission grant.
> 
> Thanks, Justin!
> 
> Overall, I think the document now strikes a reasonable balance between
> information flow-control and usability. It suggests that users should be
> able to configure preferences or extensions for even greater control.
> I'd welcome others' review whether the guidance still leaves too much
> scope for surprising privacy-invasive address-leakage.
> 
> --Wendy
> --
> Wendy Seltzer -- wseltzer@w3.org +1.617.715.4883 (office)
> Policy Counsel and Domain Lead, World Wide Web Consortium (W3C)
> http://wendy.seltzer.org/        +1.617.863.0613 (mobile)
> 
>

Received on Wednesday, 30 March 2016 09:42:24 UTC