solid / specification

Solid Technical Reports
https://solidproject.org/TR/
MIT License
486 stars 46 forks source link

Add consider-webid-profile #607

Closed csarven closed 8 months ago

csarven commented 9 months ago

This PR is a https://www.w3.org/2023/Process-20230612/#class-2 change in the specification updating the #privacy-considerations section by adding a consideration for #consider-webid-profile . It describes that the owner of a WebID Profile (in a Solid storage) ultimately decides what to include or exclude in its description, however, there may be other resources which may directly or indirectly reveal information, so the owners of the WebID are advised to take that into account.

Preview | Diff

elf-pavlik commented 9 months ago

in a WebID Profile served from a Solid storage [...] Owners of a WebID hosted from Solid storage

I'm not sure what assumptions this paragraph makes.

1) Does it assume that WebID Document (resolved by dereferencing the WebID) and the WebID Profile can be two different resources? 2) Does it assume that WebID Profile is hosted in solid storage? 3) Does it apply to WebID Document not hosted in a solid storage?

csarven commented 9 months ago

The context in which it advises WebID owners (or resource or URI owners) are for those WebIDs that are available from a Solid storage. "Solid storage" is mentioned in every sentence, e.g., "from a", "in a", "hosted from".

Does it assume that WebID Document (resolved by dereferencing the WebID) and the WebID Profile can be two different resources?

No, by definition a "WebID Profile" is detailed in a "WebID Profile Document" (resource). Typically, a "WebID Profile" comprise statements about the WebID.

Does it assume that WebID Profile is hosted in solid storage?

Of course not all, but the context in which the consideration is applicable to is a WebID available from a Solid storage or where it is mentioned in a resource that's in a Solid storage.

Does it apply to WebID Document not hosted in a Solid storage?

No.