2021-10-19 Privacy SIG Notes

Make edits to the Google Docs draft of the Privacy SIG charter

• James to review and improve the wording of the charter with "track changes" turned on.  We will review at the next SIG meeting.

Setting next meeting time.

Moving one hour later is good (although it conflicts with the Implementors meeting).  Moving earlier is okay, but not ideal.

Review MODLOGIN-163: POST /authn/login response contains clear text passwordClosedPreview from a privacy perspective.

This is primarily a security issue with the pattern of the request-response with the cleartext password.  There is a privacy concern when the body of the response is saved in log files, but the overriding concern is one of security.