...people wanted to come along to the IETF and
standardise the kind of application protocol described
in the "solution" section of this [1] paper. (Just
seen on /. ) I'm not saying that that solution is
wonderful as-is, but it does appear to be a design
that tries hard to be privacy friendly and to
prevent false reporting.

>From the paper, it looks like the Google and Waze
protocols that the authors analyse have serious
shortcomings that would likely have been spotted had
those protocols been developed more openly. There is
mention of open-source licensing, but however
those were developed, the result appears to show
a lack of security/privacy clue somewhere.

I'm not sure what, if anything, we could do to
encourage folks to bring such work here, but it
does really look like they could have deployed
something quite that  if they had
done that.

S.

[1]
https://media.blackhat.com/eu-13/briefings/Jeske/bh-eu-13-floating-car-data-jeske-wp.pdf
_______________________________________________
ietf-privacy mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/ietf-privacy

Reply via email to