Difference between revisions of "Ephemeral"

From MgmtWiki
Jump to: navigation, search
(→‎Full Title or Meme)
(→‎References)
 
(5 intermediate revisions by the same user not shown)
Line 5: Line 5:
 
*An [[Identifier]]'s primary function is to create a label to which attributes can be attached.
 
*An [[Identifier]]'s primary function is to create a label to which attributes can be attached.
 
*For an otherwise anonymous connection to enable attribute checking, like the [[User]]'s that are over 13, 18, or 21 years of age, some ephemeral [[Identifier]] is needed to ensure that any verified attribute cannot be reused in some other context.
 
*For an otherwise anonymous connection to enable attribute checking, like the [[User]]'s that are over 13, 18, or 21 years of age, some ephemeral [[Identifier]] is needed to ensure that any verified attribute cannot be reused in some other context.
−
*Ephemeral [[Identifier]]s can be as simple as the [[User]]'s IP address, HTTPS session number or the [[Subject]] [[Identifier]] (sid) in an [[OpenID Connect]] session.
+
*Ephemeral [[Identifier]]s can be as simple as the [[User]]'s IP address, HTTPS session number or the Session [[Identifier]] (sid) in an [[OpenID Connect]] session.
 +
*The Apple Advertising [[Identifier]]<ref>Apple, ''Here’s how to manage your privacy.'' https://www.apple.com/privacy/manage-your-privacy/</ref> is designed specifically to track users for the duration of a session, but not between sessions or advertisers.
  
 
==Problem==
 
==Problem==
−
Many protocols, like [[OpenID Connect]] supply a [[Subject]] [[Identifier]] (sid) that is meant to reflect the same [[Subject]] over a period of time. Typically those protocols permit transitory binding of the [[Identifier]] to a real world entity. There appears to be no way to evaluate if the [[Identifier]] is meant to be [[Persistent]] from one connection to another other than the sort of [[Assurance]] that would destroy the pseudonymity.
+
The [[User]] is seldom given any [[Assurance]] of the actual characteristics of any [[Identifier]].
  
 
==References==
 
==References==
 +
# The [[Persistent]] page shows the antonym of [[Ephemeral]].
 +
 +
 +
[[Category:Glossary]]
 +
[[Category:Identifier]]

Latest revision as of 17:05, 22 March 2019

Full Title or Meme

When an entity has a Ephemeral Identifier the assumption is that it cannot be resused for a different session or used to track the User from one session to another.

Context

  • An Identifier's primary function is to create a label to which attributes can be attached.
  • For an otherwise anonymous connection to enable attribute checking, like the User's that are over 13, 18, or 21 years of age, some ephemeral Identifier is needed to ensure that any verified attribute cannot be reused in some other context.
  • Ephemeral Identifiers can be as simple as the User's IP address, HTTPS session number or the Session Identifier (sid) in an OpenID Connect session.
  • The Apple Advertising Identifier[1] is designed specifically to track users for the duration of a session, but not between sessions or advertisers.

Problem

The User is seldom given any Assurance of the actual characteristics of any Identifier.

References

  1. The Persistent page shows the antonym of Ephemeral.
    1. ↑ Apple, Here’s how to manage your privacy. https://www.apple.com/privacy/manage-your-privacy/
    Retrieved from "http://tcwiki.azurewebsites.net/index.php?title=Ephemeral&oldid=5171"