At 3:49 PM -0400 7/7/10, Sam Hartman wrote:
Generally when I look for an idea of whether work is a good idea I look
for a clear statement of benefit. I'll admit that I don't find privacy
policies so valuable that I think everyone should have one. So, I'll
ask how will or work be improved or what problem are we running into
that a privacy policy will solve? If that cannot clearly we be
answered, we should not engage in this activity.
At 3:51 AM +0000 7/7/10, John Levine wrote:
I think we all agree that having a privacy policy would be desirable,
in the sense that we are in favor of good, and opposed to evil. But I
don't know what it means to implement a privacy policy, and I don't
think anyone else does either.
A privacy policy is basically a set of assertions about what the IETF
will do with your personal information. To invent a strawman, let's
say that the privacy policy says that registration information will be
kept in confidence, and some newly hired clerk who's a little unclear
on the concept gives a list of registrants' e-mail addresses to a
conference sponsor so they can e-mail everyone an offer for a free
IETF tee shirt.
Then what happens? Is a privacy policy a contract, and if it is, what
remedies do IETF participants have for non-performance? And if it's
not, and there aren't remedies, what's the point?
Thank you, Sam and John.
Do some people not come to IETF meetings because of the current null privacy
policy? Do they say less than they would have if we had a typical non-null
policy? If either of those two are answered yes, would those people contribute
better knowing that the IETF had a policy but no real way to enforce it other
than by apologizing when it failed to follow the policy?
If having a privacy policy, even one where there was no real enforcement
mechanism, was free, nearly everyone would want it. Given that getting such a
policy is not free, and will cause cycles to be lost from other IETF work, is
the tradeoff worth it? At this point, I would say "no", but mostly because I
don't know of anyone who contributes less due to the current null policy.
--Paul Hoffman, Director
--VPN Consortium
_______________________________________________
Ietf mailing list
Ietf(_at_)ietf(_dot_)org
https://www.ietf.org/mailman/listinfo/ietf