Consent Wording

[Eric Goodman]

>+idp.attribute-release.rejectMessage                = If you decline to send your information to the requester,
>you will not be able to continue to the service because it requires information about you to work properly.
>In that case, close the web browser to abort the login.

I lean towards something more like “you will not be able to access the service because it requires this information about you to proceed”. My concern is not having the language imply that the request – which is presumably not pre-vetted by the IdP operator – implicitly validated by the words “require(d) to work properly”. It’s entirely possible the SP does not actually require the information to work properly, but is demanding the information nonetheless as a prerequisite to continuing.

>+idp.attribute-release.confirmationQuestion         = The information above would be shared with
>the service if you proceed. Do you agree to release this information to the service every time you access it?

In my mind that should say “will be shared” not “would be shared”.


Overall I like the language changes, and won’t object to being overruled (or ignored).

--- Eric

From: dev-bounces at shibboleth.net [mailto:dev-bounces at shibboleth.net] On Behalf Of Marvin Addison
Sent: Tuesday, November 18, 2014 1:13 PM
To: Shib Dev
Subject: Consent Wording

I'd like to propose a couple changes to consent UI message wording so that the text reads more naturally:

-idp.attribute-release.rejectMessage                = If you reject that the information about you is sent to the described service, you will not be able to continue to the service because it requires your data to work properly. In that case, close the web browser windows to abort the login.
+idp.attribute-release.rejectMessage                = If you decline to send your information to the requester, you will not be able to continue to the service because it requires information about you to work properly. In that case, close the web browser to abort the login.

-idp.attribute-release.confirmationQuestion         = The information above is being released as you access the service. Do you accept that this information is sent to the service whenever you access it?
+idp.attribute-release.confirmationQuestion         = The information above would be shared with the service if you proceed. Do you agree to release this information to the service every time you access it?

Thoughts?

M

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/dev/attachments/20141118/28122849/attachment.html