It would be nice if there were an RFC to point to that used a method that
didn't include PII.   For the use cases of which I am ware, there is no
need to identify individual devices: only policies.   What's lacking is a
way to do this in the home router, so the PII winds up getting exported to
the cloud not because that's necessary to accomplish the filtering but
because it's the only available place where the translation from
PII->policy can be done in practice.   Unfortunately, solving _that_
problem is definitely out of scope for DNSOP.

On Thu, Jul 20, 2017 at 7:00 PM, George Michaelson <g...@algebras.org> wrote:

> I probably will not carry the WG with me on this, but I find myself
> thinking the PII aspect of client-ID makes it a wider-internet
> question and we might have views as a WG, and promote questions as a
> WG, but I think the "final call" on this is something which needs more
> than WG approval.
>
> Its a big question. I'd actually welcome adoption on many levels, but
> that isn't to pre-empt that it goes to WGLC. I think we need to
> formalize the issues and take them out of the WG for review and
> discussion.
>
> documenting current practice is ok btw, but .. PII.
>
> -G
>
> _______________________________________________
> DNSOP mailing list
> DNSOP@ietf.org
> https://www.ietf.org/mailman/listinfo/dnsop
>
_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to