Trust negotiation I: Access Control.


Service has an access control policy.

  • Assume that access control policy doesn't permit anonymous use.
  • The request is rejected, and the client is asked to provide more information.
  • The policy may be confidential by itself, so a sanitized version is sent to client.
  • Pay-off between policy sanitization and client's ability to pick maximum privacy credential.

Terms and Conditions

1. Users of the service must be of age 18 or older.
2. Proof of age must be provided.

Confidential:
3. British drivers' licences not to be accepted.