RE: Requirements Document

Hi Brian,

> I think this is insufficient, because I think there can be
> delegation services you trust. Think of an underpowered
> remote device trying to let several services track him.
> He would prefer to delegate to a service that could supply
> location updates to all he authorizes the delegator to
> serve. He only supplies his report to the delegator.
>
> Although I wouldn't mandate it's use, it is possible to
> encrypt the report such that anyone the user didn't
> authorize couldn't decrypt it. Works, but may be
> too expensive to use in lots of cases. Of course,
> those he did authorize could subsequently reveal to anyone
> else, but that's the nature of secrets.

That would be one model. I guess we could include this as one
model.

John
Received on Thu Aug 30 11:08:05 2001