Subject: [Ecrit] Need for a spec(t) in ecrit framework

From: "Elwell, John" <[email-masked]>
Date: Thu, 29 Jul 2010 13:24:08 +0200

RFC 3325 says in section 5 (Proxy Behavior):
"When a proxy forwards a message to another node, it must first
   determine if it trusts that node or not.  If it trusts the node, the
   proxy does not remove any P-Asserted-Identity header fields that it
   generated itself, or that it received from a trusted source.  If it
   does not trust the element, then the proxy MUST examine the Privacy
   header field (if present) to determine if the user requested that
   asserted identity information be kept private."

So withholding PAI if the proxy does not trust the next node is mandated only if the Privacy header field indicates privacy is required. So I don't think the issue presented by Brian today is in fact an issue.

John