v3 consent to attribute release : attribute hash function ?
Cantor, Scott
cantor.2 at osu.edu
Mon Sep 8 13:42:40 EDT 2014
On 9/8/14, 1:40 PM, "Tom Zeller" <tzeller at dragonacea.biz> wrote:
>Oh, and, is there a case where we just want to store the
>IdPAttributeValues in plaintext ? If the DataSealer is going to
>encrypt the cookie anyway, do we need the hash of values ? The hash
>seems bigger than the values, is my guess.
There's probably some truth to that, but I think the concern of having PII
stored in these records is enough to make that a bad idea.
-- Scott
More information about the dev
mailing list