I'm comfortable with the language.
Michael Hammer
On Thu, Feb 18, 2021 at 3:40 PM Brotman, Alex wrote:
> Aggregated comments:
>
> --
> Aggregate feedback reports contain aggregated data relating to messages
> purportedly originating from the Domain Owner. The data does
Aggregated comments:
--
Aggregate feedback reports contain aggregated data relating to messages
purportedly originating from the Domain Owner. The data does not contain any
identifying characteristics about individual users. No personal information
such as individual
A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Domain-based Message Authentication, Reporting
& Conformance WG of the IETF.
Title : Domain-based Message Authentication, Reporting, and
Conformance (DMARC)
Circling back to this:
On Fri, Jan 29, 2021 at 12:56 PM Dave Crocker wrote:
> On 1/29/2021 12:15 PM, Murray S. Kucherawy wrote:
>
> On Fri, Jan 29, 2021 at 7:51 AM Dave Crocker wrote:
>
>>
>> Abstract
>>
>>DMARC (Domain-based Message Authentication, Reporting, and
>>Conformance) is a
On Thu 18/Feb/2021 17:52:55 +0100 Kurt Andersen (b) wrote:
On Thu, Feb 18, 2021 at 7:09 AM Ken O'Driscoll wrote:
. . . I'd propose something like the below, which I think gets across what
we all want to say.
===
Aggregate feedback reports contain anonymized data relating to messages
On Thu, Feb 18, 2021 at 7:09 AM Ken O'Driscoll wrote:
>
> . . . I'd propose something like the below, which I think gets across what
> we all want to say.
>
> ===
> Aggregate feedback reports contain anonymized data relating to messages
> purportedly originating from the Domain Owner. The
The concern is that PII is contained in the aggregate reports.
The machinations of the individual Information Governance functions that draw
such conclusions or the decision making processes of individual organisations
around those conclusions, is not relevant, and won’t help close this
In hindsight, it looks a bit strange to have the first paragraph say "don't
worry about PII" and the next paragraph say "if you're worried about PII,
here's how to mitigate".
But it's a genuine concern (misguided or not) and I've been in enough meetings
to at least understand where it comes
