Re: certification database and privacy

[Gabriel Krabbe]

On Tuesday, August 24, 1999, Faber Fedor wrote:

> At 05:37 PM 8/24/99 +0200, A.R. (Tom) Peters wrote:
>
>>  The other major issue is, what do we use as a unique personal
>> identifier?
>
> I have always liked the idea of using an email address as the unique
> identifier, since that *has* to be unique, no?

Yes, but (in no particular order):

- While most people who know their way about Linux will have an e-mail
  address, there may be those who don't. What happens to them? We
  suddenly require two ID schemes. Not good.

- I'm pretty sure I want nobody around my company to have my private
  e-mail address. I can turn my cellphone off and leave my pager at
  home, but I'll keep checking my personal, private e-mail during (for
  example) any holidays I might be having. Sure, with a little bit of
  digging, they'll have it, along with my home phone number, and a
  wealth of other info, but that's different from submitting it with
  my CV. I could use my business one, but:

- E-mail addresses change every now and then. I don't want to have to
  keep updating my database entry, changing e-mail addresses is enough
  of a hassle even without that.

- I have around 25 unique and different e-mail addresses. As a number
  of e-mail-as-user-id password protected sites prove to me about
  every day, I tend to forget after a while which one I used on which
  particular site.

> Now, there *will*/should be
> an internally generated unique id for indexing purposes, etc., but that
> remains internal to the database.

Why not use that one?

>>(* 2a *)
>> Do we want the employer to be able to do that independent of the
>> candidate, i.e. he is able to guess or obtain the ID used in our database?
>> Or do we require active participation by the candidate, who would need
>> to disclose his semi-secrte ID ?
>> The answer to this question determines the type of ID we can use.
>
> The candidate should be able to give the employer his unique id (Read:
> email address) for purposes of searching our database.

Yes, but I can't limit what _else_ he does with it (see above). I can,
however, limit his usage of an ID that only has one use in the first
place.


Gabe
--
The more you complain, the longer God lets you live.




________________________________________________________________________
This message was sent by the linux-cert mailing list. To unsubscribe:
echo unsubscribe | mail -s '' [EMAIL PROTECTED]