<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.6000.17102" name=GENERATOR></HEAD>
<BODY>
<DIV><FONT face=Arial size=2><SPAN class=484004504-13082011>Hi
Everybody,</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=484004504-13082011></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=484004504-13082011>I have reviewed <A
href="http://wiki.debian.org/FreedomBox/IdentityManagement">http://wiki.debian.org/FreedomBox/IdentityManagement</A> and
have the following questions, comments and suggestions. Once agreement is
reached, i.e. no disagreements on this thread I will update the wiki
entry.</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=484004504-13082011></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=484004504-13082011>First of all I would
like to make the observation that the current document seems to be primarily
concerned about security but touches on user management. If this document is
concerned with trust management and not user management then I
apologise now for my comments being off-topic about this wiki entry. I have
also broadened the scope of user management to include people in every
context.</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=484004504-13082011></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=484004504-13082011>
<DIV><FONT face=Arial size=2><SPAN class=484004504-13082011>Before I write about
user management, I would like to mention some differences I see between
people in the real world and the online world. In the real world, a
multi-lingual person speaks to different groups in their own languages, i.e.
some group members may only understand the groups language. In the online world,
multi-lingual people (correct me if this assumption is wrong) are happy to
receive content in different languages as a single (activity) stream.
However, the "mono-lingual" people only want to see the multi-lingual
posts of their language and for this reason websites stream content based
on language, e.g. en.wikinews.org, de.wikinews.org, en.ogmaciel.com,
pt.ogmaciel.com. Does this mean multi-lingual people should have a
different username for each language for the benefit of their "mono-lingual"
audience?</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=484004504-13082011></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=484004504-13082011>In the real world,
when an activist says something controversial this may go unnoticed by most
of their friends through the anonymity of the real world. Even those
friends present at the time could have been surprised by the
activists comments, but being human they may forget over time.
However, in the online world there would be a permanent record of the
activists comments - the internet never forgets. If the FBX is to
accommodate this need, should the FBX manage two domains, one for personal
usernames and one for activist usernames? Can you have 2 domains on the same IP
address?</SPAN></FONT></DIV></SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=484004504-13082011></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=484004504-13082011>Below are the
existing Glossary entries</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN class=484004504-13082011>
<LI>
<P class=line891><STRONG>Owner(s):</STRONG> Administrative account on the <A
href="http://wiki.debian.org/FreedomBox">FreedomBox</A>. <SPAN class=anchor
id=line-16></SPAN></P></LI>
<LI>
<P class=line891><STRONG>User(s):</STRONG> refers to system user, which would be
the login used to connect to a <A
href="http://wiki.debian.org/FreedomBox">FreedomBox</A> account. <SPAN
class=anchor id=line-17></SPAN></P></LI>
<LI>
<P class=line891><STRONG>Identit{y,ies}:</STRONG> refers to a virtual (or
service) identity. </P></LI></SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN class=484004504-13082011>I would like to
propose the following glossary entries;</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=484004504-13082011></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=484004504-13082011>*Owner*
</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN class=484004504-13082011>The FBX
Administrative Account</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=484004504-13082011></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=484004504-13082011>*</SPAN></FONT><FONT
face=Arial size=2><SPAN class=484004504-13082011>Local* </SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN class=484004504-13082011>One or many Local
Area Network user accounts. Each Local has system user login access to a
FBX.</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=484004504-13082011></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN
class=484004504-13082011>*Username*</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN class=484004504-13082011>One or many
username's (<A href="mailto:username@domain.tld">username@domain.tld</A>)
per account. Should there be one username per language?</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=484004504-13082011></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=484004504-13082011>*Profile*
</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN class=484004504-13082011>Profiles can be
based on relationships and language. Profiles are used to control the
release of personal identifiable and personal
information.</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=484004504-13082011></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=484004504-13082011>*Contact*
</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN class=484004504-13082011>Address book
of Local. </SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=484004504-13082011></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=484004504-13082011></SPAN></FONT><FONT
face=Arial size=2><SPAN class=484004504-13082011>*Guest*</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN class=484004504-13082011>One or many contacts
with Guest login access to the FBX. A Guest account is required to store your
friends backup or for friends who only have an email address, i.e. no social
network account. Each contact is associated with a profile through a defined
relationship.</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=484004504-13082011></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=484004504-13082011>*Circle*
</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN class=484004504-13082011>Lists of contacts.
There will be lists for relationships which will be automatically updated when
there is a new Guest. There can be custom lists with contacts and/or guests
(guests are a subset of contacts). </SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=484004504-13082011></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN
class=484004504-13082011>*Group*</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN class=484004504-13082011>Private (invite
only) and moderated and public forums/conferences for
members</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=484004504-13082011></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=484004504-13082011>*Member*
</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN class=484004504-13082011>Public access to
Group login on the FBX</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=484004504-13082011></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN
class=484004504-13082011>*Subscriber*</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN class=484004504-13082011>A "follower" of
the public stream</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN class=484004504-13082011></SPAN></FONT><FONT
face=Arial size=2><SPAN class=484004504-13082011></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=484004504-13082011>The existing
*features* are listed below</SPAN></FONT></DIV><FONT><SPAN
class=484004504-13082011>
<UL>
<LI>
<P class=line862><FONT face=Arial><FONT size=2>The User/Identity management
<STRONG>must</STRONG> enforce privacy and avoid leaks of informations. <SPAN
class=anchor id=line-22></SPAN></FONT></FONT></P></LI>
<LI>
<P class=line862><FONT face=Arial size=2>Users/Owners of a </FONT><A
href="http://wiki.debian.org/FreedomBox"><FONT face=Arial
size=2>FreedomBox</FONT></A><FONT face=Arial><FONT size=2>
<STRONG>should</STRONG> be able to have several Identities. <SPAN class=anchor
id=line-23></SPAN></FONT></FONT></P></LI>
<LI>
<P class=line862><FONT face=Arial><FONT size=2>Identities
<STRONG>must</STRONG> not be linked publicly to a User. <SPAN class=anchor
id=line-24></SPAN></FONT></FONT></P></LI>
<LI>
<P class=line862><FONT face=Arial><FONT size=2>Identities or Users
<STRONG>may</STRONG> not be linked to a Legal Name. <SPAN class=anchor
id=line-25></SPAN></FONT></FONT></P></LI>
<LI>
<P class=line862><FONT face=Arial size=2>Identities <STRONG>should</STRONG> be
able to use several services, not always hosted on the same </FONT><A
href="http://wiki.debian.org/FreedomBox"><FONT face=Arial
size=2>FreedomBox</FONT></A><FONT face=Arial><FONT size=2>. Thus there
<STRONG>should</STRONG> be a way to publish this information, either publicly
or privately. <SPAN class=anchor id=line-26></SPAN></FONT></FONT></P></LI>
<LI>
<P class=line862><FONT face=Arial><FONT size=2>There <STRONG>must</STRONG> be
strong ways to authenticate an Identity as well as a User. <SPAN class=anchor
id=line-27></SPAN></FONT></FONT></P></LI>
<LI>
<P class=line862><FONT face=Arial size=2>There <STRONG>must</STRONG> be strong
ways to verify a Identity ownership.</FONT></P></LI></UL>
<P class=line862><SPAN class=484004504-13082011><FONT face=Arial size=2>I would
be grateful if somebody could explain bullet point 5 and the last bullet point.
I would also like to propose "identity" in the feature list above be replaced
with username, a label more familiar to users. I would also like to propose the
"Using GNUPG" section be replaced with "Security".</P></FONT></SPAN>
<P class=line862><SPAN class=484004504-13082011><FONT face=Arial size=2>Some of
my glossary entries seem a bit long and I am wondering should some of the
glossary characteristics be listed as a feature. I also
wonder where should I place the scenarios described above - should I add
them to the user stories wiki entry?</FONT></SPAN></P>
<P class=line862><SPAN class=484004504-13082011><FONT face=Arial size=2>If
people agree with broadening the scope of the entry I would like to rename the
wiki entry to user management. </FONT></SPAN><SPAN
class=484004504-13082011><FONT face=Arial size=2>All feedback is
welcome.</FONT></SPAN></P>
<P class=line862><SPAN class=484004504-13082011><FONT face=Arial size=2>--
fiftyfour</FONT> </SPAN></P></SPAN></FONT>
<DIV><FONT face=Arial size=2><SPAN
class=484004504-13082011></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN
class=484004504-13082011></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN
class=484004504-13082011></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN
class=484004504-13082011></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN
class=484004504-13082011></SPAN></FONT> </DIV></BODY></HTML>