RE: Requirements Document

> Do you object to a requirement that it must be possible to
> deploy the geopriv object in a standards based manner
> such that authorization to reveal location information is <<<==
> handled out of band (by contract for example), rather than
> by explicit user action at the point of use?

s/is/might also be/

and i see it as a general issue of delegation of authority, with its own set
of attendant authentication and authorization issues. e.g. i want to know
to what agent i am delegating, and to be able to restrict that agent's
abilities to act in my place, in to whom they reveal, what they reveal, and
if and what they may subdelegate.

randy
Received on Mon Aug 20 16:34:40 2001