[Ietf-not43] -02 requirements draft

[Ted Hardie]

Requirement 3.1.4 currently says:

3.1.4 Level of Access

   The service MUST allow the classification of data as being either
   privileged or non-privileged, for the purpose of restricting access
   to privileged data.  Note that this requirement makes no assumption
   or prescription as to what data (social or operational) might be
   considered privileged, but merely provides the ability to make the
   classification as necessary.

   The service MUST be capable of serving both privileged and non-
   privileged data.

   
    The service MUST be capable of authenticating privileged entities and
   ensuring that only those entities have access to both privileged and
   non-privileged data.

   The service MUST be capable of providing access to non-privileged
   data without requiring authentication of any type (i.e.  anonymous
   access).


I read that as saying that the service must be able to distinguish
between those who have a right to ask for priviledged data and those
who do not, and I'd put "Direct Marketer" and "law enforcment"
in two different places in that dichotomy.  You may decide
that "paid-up Direct Marketer" and "non-paid-up Direct Marketer"
also belong in two different classes, but that is a matter
of policy and contract, not a question of how the service needs
to work.
			regards,
				Ted Hardie



> Leslie,
> 
> > As for the "all domains owned by Joe Example", we've heard this
> > requirement from both IPR and law enforcement communities.
> 
> at issue is that this same style of query is exactly what direct marketeers
> want too. while i have herd from the IPR community I don't see them
> offering to fund the development and deployment of such services.
> 
> though we may have some actors that desire these services I see no reason
> to offer them for free. This is why I have proposed a requirement for
> settlements.
> 
> I also can't see how we can tell the diference between an authorized user
> that is a Direct Marketer and one that is from law enforcement.
> 
> 
> best,
> 
> -rick
> 
> 
> _______________________________________________
> Ietf-not43 mailing list
> Ietf-not43@lists.verisignlabs.com
> http://lists.verisignlabs.com/mailman/listinfo/ietf-not43
>