[Ietf-not43] Mail address mandatory?

[Stephane Bortzmeyer]

I read in draft-ietf-crisp-lw-user-00.txt:

     The target inetOrgPerson entries MAY have any number of attributes 
     defined, with any number of access restrictions, as required by 
     local security policies, government regulations or personal 
     privacy concerns. However, the mail attribute MUST be defined, 
     MUST be valid, and MUST have anonymous read permissions. 

Why is it so (MUST have anonymous read permissions)? The email address
is often precisely the attribute some people want to hide (because of
spammers).

Anyway, it should be a matter of policy, I don't think it is
appropriate to put it in the protocol.