v3 consent to attribute release : attribute hash function ?

Cantor, Scott cantor.2 at osu.edu
Mon Sep 8 13:42:40 EDT 2014


On 9/8/14, 1:40 PM, "Tom Zeller" <tzeller at dragonacea.biz> wrote:

>Oh, and, is there a case where we just want to store the
>IdPAttributeValues in plaintext ? If the DataSealer is going to
>encrypt the cookie anyway, do we need the hash of values ? The hash
>seems bigger than the values, is my guess.

There's probably some truth to that, but I think the concern of having PII
stored in these records is enough to make that a bad idea.

-- Scott



More information about the dev mailing list