Re: RE: [Geopriv] Consensus on changes to location-conveyance

>I don't really understand why you think location by reference is so much of
> a concern.

Because location by reference involves storage of personal information on a 
server. That suddenly makes all sorts of regulations apply, the points I 
mentioned address only a small part of that. Having an anonymous URL for 
example often makes a difference, because then the information is no longer 
directly linked to a particular person.

When an endpoint inserts location by value, you can reasonably argue that 
opt-in consent requirements (which many countries have) are fulfilled, 
provided the endpoint gives the user control over whether or not location is 
inserted. Same holds for the endpoint inserting a flag asking a proxy to 
fill in the location (by value).
For location-by-reference this is much more fuzzy. You probably don't need a 
lecture on privacy regulations, but e.g. 
http://www.isoc.org/briefings/015/index.shtml (from 2003 but still 
applicable IMO) illustrates the mess.

A while ago I submitted a draft on Temporarily Routable User Agent URIs 
(http://www.ietf.org/internet-drafts/draft-jbemmel-sip-truu-02.txt), which 
provides anonymous, temporary URIs that can be explicitly invalidated. You 
may want to consider something similar for location-by-reference

Regards,

Jeroen 


_______________________________________________
Sip mailing list  https://www1.ietf.org/mailman/listinfo/sip
This list is for NEW development of the core SIP Protocol
Use [email protected] for questions on current sip
Use [email protected] for new developments on the application of sip