[WG-P3] Disruptive NSTIC Critique

[Mark Lizar]

I agree,

The loss of anonymity at  the hands of commercial interests is a grave  
concern and is already happening on a large scale with Facebook  
connect and the like.

This leads me to think that a community identity provider is sorely  
needed, in which controls, not completely driven by profit, are driven  
in part by the people with values that reflect the privacy and trust  
needs of community and the individual.  But it seems that without the  
profit of a commercial IdP this is hard if not impossible to achieve  
on scale.   This leads me to believe that it would take an effort like  
NSTIC to put something of this nature in place. Although NSTIC, as you  
point out, would not be enough on its own, and legally, the US will  
need the legal conventions to support a community IdP effort  
domestically and internationally in driving controls that protect  
privacy, provide security and create a true platform for trust.  At  
this time a task that seems daunting considering the fractured nature  
of privacy politics in the US.  Perhaps something along the lines of  
the "Convention 108," the International Privacy Convention? (Which   
EPIC is again calling for the US to ratify).

- M

On 8 Feb 2012, at 01:54, Anna Slomovic/Equifax wrote:

> Mark,
>
> Thank you for sending out this link. The loss of anonymity is,  
> indeed, a great worry. The fact that NSTIC is voluntary at the  
> outset doesn't mean that it will remain so in any practical way.  
> There is nothing in the law that requires that the anonymous option  
> remain available, so at least in the US, it is very easy to envision  
> a situation when an ID is required because a business says it is-- 
> and businesses will because they will benefit. Airlines embraced ID  
> requirements as "security requirements" long before 9/11/2001  
> because this prevented resale of cheap tickets or tickets obtained  
> with frequent flier miles. Some concert and theater venues now  
> require ID for the same reason. Having an ID and, therefore,  
> information about someone's history and behavior is a marketer's  
> dream.
>
> I don't think this is paranoia, either.
>
> Anna
>
> Anna Slomovic
> Chief Privacy Officer
> Equifax
> 1010 N. Glebe Road, Suite 500
> Arlington, VA 22205
> O: 703.888.4620
> C: 703.254.9656
>
> From: wg-p3-bounces at kantarainitiative.org [mailto:wg-p3-bounces at kantarainitiative.org 
> ] On Behalf Of Mark Lizar
> Sent: Tuesday, February 07, 2012 8:30 PM
> To: Kantara P3WG
> Subject: [WG-P3] Disruptive NSTIC Critique
>
> HI All,
>
> Some good points in this critique of the NSTIC effort that is worth  
> bringing to the attention of  P3 members.
>
> Has anyone seen this article?   Google-NSTIC-Leading-the-March-to- 
> Digital-Totalitarianism.   I think it is worth sharing as it is very  
> critical of the NSTIC elaborating some different privacy and trust  
> risk view points, which we have yet to discuss in P3.
>
> Some points brought up in this article maybe useful to discuss more  
> broadly.   This article, along with other issues relating to  
> developing an identity ecosystem, has led me to think that a  
> community based identity provider is a missing element in developing  
> a trustworthy ecosystem.   (Something in between a government and a  
> corporate identity provider)
>
> Has anyone else has had thoughts along these lines?
>
> - Mark
>
>
>
>
>
> This message contains information from Equifax Inc. which may be  
> confidential and privileged. If you are not an intended recipient,  
> please refrain from any disclosure, copying, distribution or use of  
> this information and note that such actions are prohibited. If you  
> have received this transmission in error, please notify by e- mail postmaster at equifax.com 
> .
> _______________________________________________
> WG-P3 mailing list
> WG-P3 at kantarainitiative.org
> http://kantarainitiative.org/mailman/listinfo/wg-p3

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://kantarainitiative.org/pipermail/wg-p3/attachments/20120208/4a9153a7/attachment-0001.html