RE: Authentication/Authorization Issues: Re: [Geopriv] coming to termson location by reference

Right. It would have to use that to identify you. Having done that, it can
create a PIDF with an anonymous identity which it could, if it needed to,
associate that identity. Similarly, it could do that with the construction
of the URL. No one other than the LIS should be able to make that
association.

I don't assume you have any other identity. There is a need to upload a
ruleset for this identity, and the LCP uses the same identity to get the
LbyR or LbyV. Some networks do have other identity info, but I think it has
to work with just whatever the LCP identity is.

Brian

> -----Original Message-----
> From: Henning Schulzrinne [mailto:hgs@cs.columbia.edu]
> Sent: Wednesday, September 13, 2006 5:18 PM
> To: Brian Rosen
> Cc: geopriv@ietf.org
> Subject: Re: Authentication/Authorization Issues: Re: [Geopriv] coming to
> termson location by reference
>
>
> > I propose to put an anonymous identity there. The LIS actually knows
> who
> > its subscriber is. It should be able to determine the identity from the
>
> I don't know what "knowledge" you assume. In our local case, the
> Columbia network knows your MAC address (and the IP address it
> assigned). That's it.
>
>
> > URL, let alone the anonymous identifier in the URL, but no one else
> should
> > be able to. I'm not sure there is any protocol reason for it. It may
> be
> > needed for audit or legal reasons.
> >
> >
> >
> >
> > _______________________________________________
> > Geopriv mailing list
> > Geopriv@ietf.org
> > https://www1.ietf.org/mailman/listinfo/geopriv

_______________________________________________
Geopriv mailing list
Geopriv@ietf.org
https://www1.ietf.org/mailman/listinfo/geopriv
Received on Wed, 13 Sep 2006 17:29:40 -0400