[Koha] [discussion] Privacy issue (bug 3280)

[Ian Walls]

IP address is not sufficiently rigourous to identify and individual or even
a location (TOR network and all that).  It's routinely mis-used as such an
identifier.  I don't see any benefit to adding it to Koha's outgoing
emails, since it cannot be relied upon, and it could put people at risk of
ill-advised legal sanction.

If there is a strong use case for it, it would need to go behind a syspref,
with the default value set to "disable".  But personally I don't think it's
worth including.


-Ian

On Tue, Jul 3, 2012 at 1:37 PM, glaws <glawson at rhcl.org> wrote:

> Make it optional at most (syspref), off by default.
>
> Greg
> ----------------------
>
> On 07/03/2012 11:17 AM, Paul Poulain wrote:
> > Hello Koha users & developers,
> >
> > The bug 3280 fixes a problem in cart sending in opac : the behaviour has
> > changed, and for security reason, it will be possible only for logged-in
> > users.
> > A question has also been raised : we could also add the IP address of
> > the sender in the mail that Koha sent. Do you think :
> > 1- we could
> > 2- we should
> > 3- we shouldn't
> >
> > (and why)
> >
> > I start arguing = I think we should, and in France, I think it's a legal
> > issue, you must be able to answer any legal request from a court (9-11,
> > thank you :\ )
> > It's right we have the username, but the IP address is a good complement
>
>
> _______________________________________________
> Koha mailing list  http://koha-community.org
> Koha at lists.katipo.co.nz
> http://lists.katipo.co.nz/mailman/listinfo/koha
>