I absolutely agree with Steve here, but I think that the problem here is too
little integration, not too much. I don't think that this security through
obscurity scales very well.
There needs to be a gatekeeper. If someone wants to schedule a call with me,
fine, just drop me a note first so I can tell my system to accept it. Oh and if
you want to send more than a few lines in the note you will have to be on the
approvals list.
CEOs and Paris Hilton already have these security measures in place.
I think that a good technical bar to set here is that a 'one address' system
must be secure enough against unwanted contact that Paris Hilton can use it and
post the same contact address on her Web site as Britney Spears would use to
contact her.
If you are known directly or a friend of a trusted friend you get in, otherwise
you get a lower level of communication, the bottom rank being directed to the
Paris Hilton fan club.
-----Original Message-----
From: Steven M. Bellovin [mailto:smb(_at_)cs(_dot_)columbia(_dot_)edu]
Sent: Wednesday, November 29, 2006 7:23 PM
To: dcrocker(_at_)bbiw(_dot_)net
Cc: Harald Alvestrand; ietf(_at_)ietf(_dot_)org
Subject: Re: IM and Presence history
On Wed, 29 Nov 2006 10:33:15 -0800
Dave Crocker <dhc2(_at_)dcrocker(_dot_)net> wrote:
The underlying specifications permit you to have different
addresses, for different services. They also permit you to have the
*same* address.
This is only a good idea if coupled with a powerful,
easy-to-use interface that restricts presence visibility.
Many more people have my email address than my IM addresses;
I'm also very careful about who gets my mobile phone number.
Why? Because IM communication and phone calls interrupt me
in a way that email does not. In fact, I take advantage of
email to avoid giving out the other information promiscuously
-- I tell people who perceive an urgent need to reach me to
email page-smb at the appropriate domain; this address is
translated to both SMS and a direct email message.
--Steve Bellovin, http://www.cs.columbia.edu/~smb
_______________________________________________
Ietf mailing list
Ietf(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/ietf
_______________________________________________
Ietf mailing list
Ietf(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/ietf