indieweb / indieauth

IndieAuth.net website code and IndieAuth Specification
52 stars 7 forks source link

IndieAuth needs non-normative Privacy Threat Model documentation #63

Open tantek opened 3 years ago

tantek commented 3 years ago

Similar to The Google WebID privacy threat model document, the IndieAuth specification should have a brief non-normative “Privacy Threat Model” or “Privacy Considerations” section, perhaps right after the Security Considerations section, or alternatively as a separate document which the spec links to.

(Originally published at: https://tantek.com/2020/286/b1/)