ietf
[Top] [All Lists]

Re: Last call: draft-montemurro-gsma-imei-urn-16.txt

2013-07-19 17:53:58

Tim

Do you not think that the text in the security considerations section::

"because IMEIs can be loosely correlated to a user, they need to be treated as 
any other personally identifiable information. In particular, the IMEI URN MUST 
NOT be included in messages intended to convey any level of anonymity"

covers the privacy issue?

If not what is the additional privacy concern?

Andrew

From: Tim Bray [mailto:tbray(_at_)textuality(_dot_)com]
Sent: Friday, July 19, 2013 12:07 PM Central Standard Time
To: S Moonesamy <sm+ietf(_at_)elandsys(_dot_)com>
Cc: IETF-Discussion Discussion <ietf(_at_)ietf(_dot_)org>
Subject: Re: Last call: draft-montemurro-gsma-imei-urn-16.txt

On Fri, Jul 19, 2013 at 9:52 AM, S Moonesamy 
<sm+ietf(_at_)elandsys(_dot_)com<mailto:sm+ietf(_at_)elandsys(_dot_)com>> wrote:

It would be easier to have the draft discuss the GSMA URN only.  The 
alternative is to have the draft discuss the privacy considerations of using 
IMEI and IMEISV.

Good catch.  Assuming this is a good idea (I’m dubious) it would be completely 
unacceptable to register it without a discussion of privacy implications. -T


Regards,
S. Moonesamy


---------------------------------------------------------------------
This transmission (including any attachments) may contain confidential 
information, privileged material (including material protected by the 
solicitor-client or other applicable privileges), or constitute non-public 
information. Any use of this information by anyone other than the intended 
recipient is prohibited. If you have received this transmission in error, 
please immediately reply to the sender and delete this information from your 
system. Use, dissemination, distribution, or reproduction of this transmission 
by unintended recipients is not authorized and may be unlawful.
<Prev in Thread] Current Thread [Next in Thread>