Hi,
quick question about one of the IAB considerations for OPES (taken
from draft-iab-opes-01.txt).
(2.1) One-party consent: An OPES framework standardized in the IETF
must require that the use of any OPES service be explicitly
authorized by one of the application-layer end-hosts (that is,
either the content provider or the client).
I was just wondering about services that NEVER modify any of the
content (i.e. the application messages). Does this also apply to such
services? Such services may include logging/billing/accounting of
different kinds - they never modify content, just log it and pass it
back. In principle, such services can also be implemented using the
OPES framework. Does an endpoint have to give consent if an ISP wants
to do the accounting/billing on an OPES server rather than somewhere else?
Note, I'm NOT asking or advocating to open up this specific
consideration or to create pinholes, just asking whether this
understanding is correct.
Thanks,
Markus