RE: Requirements Document

Hi Randy,

> and i see it as a general issue of delegation of authority,
> with its own set of attendant authentication and authorization
> issues. e.g. i want to know to what agent i am delegating, and
> to be able to restrict that agent's abilities to act in my place,
> in to whom they reveal, what they reveal, and if and what they
> may subdelegate.

My general comment is that when you delegate something,
most likely you will not be able to control what your delegate
does. I think delegation usually (always ?) introduces
security & privacy problems.

The only way that I could see this working would be that the
delegate would not be able to understand the location information
without consulting you. So, in effect, this would mean that your
delegate is essentially only screening your calls. Is this
sufficient?

John
Received on Thu Aug 30 10:45:48 2001