[Ietf-not43] Suggestions of changes to the requirements document

[Stephane Bortzmeyer]

On Tue, Jan 14, 2003 at 10:49:16AM +0100,
 Vittorio Bertola <vb@bertola.eu.org> wrote 
 a message of 142 lines which said:

> Practically, I think that the service should be able to classify data
> (not by class, but at the level of a single data field entry of a
> single domain name, to allow for the maximum flexibility) as "private"
> if the registrant has not consented to distribute them publicly
> through the service. Queries by domain name must return a standard
> string (for example "<private>") when the required field contains an

It should be noted there is currently a difficult discussion on the
companion IETF Working Group ProvReg (which tries to standardize the
registry interface for modifications, Crisp dealing with "read-only"
queries).

The IESG froze the progress of the EPP protocol documents to the RFC
level because of privacy concerns (the lack of a standard way to
express privacy preferences for the registrant).

A good part of the discussion revolves around wether a simple binary
(Disclose/doNotDisclose) capability is better than nothing or if we
should use a full-fledged system like W3C's P3P to express privacy
preferences.