Phorm, Desktop Office Applications, and Data Privacy Concerns
badphorm.co.uk/dephormation.org.uk
Nicholas Bohm
ukcrypto at chiark.greenend.org.uk
Sun, 23 Mar 2008 17:32:56 +0000
Ben Laurie wrote:
> Pete John wrote:
>> Badphorm and Dephormation believe the Phorm system should be fully
>> opt-in.
>> Opt-out systems are, in our opinion, not acceptable for such a
>> potentially
>> invasive piece of technology. Such opt-in must be explicit and voluntary
>> (requiring specific user action) for all subscribers, not simply a
>> change in
>> the ISPs terms and conditions. The opt-in process must be managed at a
>> network level, not reliant on cookies or any other type of client side
>> mechanism. Where a user has chosen not to participate in the Phorm
>> system,
>> that user’s traffic must not be passed through or be accessible by any
>> equipment owned, operated or supplied in whole or in part by Phorm
>> (including software operating on ISP owned equipment).
>
> With all the focus on irate users, people seem to be neglecting the
> other injured party: the owner of websites whose data is intercepted by
> Phorm.
>
> Surely it should be opt-in for them, too?
Yes indeed, as FIPR has in effect argued to the Information Commissioner.
A technical fix would be nice; failing that, an express prohibition on
the site would be better than nothing. (Bear in mind that Phorm may
fail in the UK but linger on elsewhere.)
Nicholas
--
Salkyns, Great Canfield, Takeley,
Bishop's Stortford CM22 6SX, UK
Phone 01279 870285 (+44 1279 870285)
Mobile 07715 419728 (+44 7715 419728)
PGP public key ID: 0x899DD7FF. Fingerprint:
5248 1320 B42E 84FC 1E8B A9E6 0912 AE66 899D D7FF