Thread: [limesurvey-developers] A thought about pseudo-anonymous terminology
The leading Open Source survey tool
Brought to you by:
c_schmitz
From: Thibault Le M. <Thi...@su...> - 2008-04-10 17:05:44
|
On the roadmap I can read: <quote> pseudo-anonymous (get a better name and define this better, you have to authenticate so what is anonymous about it...) ('est. 1 days') </quote> But, when I vote (presidential election for instance), though I have to authenticate using my id card and my voter-card, I still consider my voting choice to remain confidential and thus anonymous. What is not confidential is the fact I've voted, but it is commonly accepted that anonymous here refers to the 'answer confidentiality'. Thus, in order to support 'anonymous answers', LS2 must ensure that an answer can't be linked to the participant identity either through LS interface, or with DB/system admin rights. Another point is about extra data that can be collected: @IP, referrer addresses, timestamps, ... these are data that can affect confidentiality of answers and thus special care must be taken when using both these extra "auto-fields" and anonymous surveys. Thibault |
From: Macasek, M. A. <mma...@mi...> - 2008-04-10 17:48:07
|
Thibault, For the most part what you described is the intention of the 'pseudo-anonymous' survey. We need to nail down exactly what it means especially with regard to the last few comments you made about IP address tracking, etc. Michael On 4/10/08 1:03 PM, "Thibault Le Meur" <Thi...@su...> wrote: > On the roadmap I can read: > <quote> > pseudo-anonymous (get a better name and define this better, you have to > authenticate so what is anonymous about it...) ('est. 1 days') > </quote> > > But, when I vote (presidential election for instance), though I have to > authenticate using my id card and my voter-card, I still consider my > voting choice to remain confidential and thus anonymous. What is not > confidential is the fact I've voted, but it is commonly accepted that > anonymous here refers to the 'answer confidentiality'. > > Thus, in order to support 'anonymous answers', LS2 must ensure that an > answer can't be linked to the participant identity either through LS > interface, or with DB/system admin rights. > > Another point is about extra data that can be collected: @IP, referrer > addresses, timestamps, ... these are data that can affect > confidentiality of answers and thus special care must be taken when > using both these extra "auto-fields" and anonymous surveys. > > > Thibault > > > ------------------------------------------------------------------------- > This SF.net email is sponsored by the 2008 JavaOne(SM) Conference > Don't miss this year's exciting event. There's still time to save $100. > Use priority code J8TL2D2. > http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone > _______________________________________________ > limesurvey-developers mailing list > lim...@li... > https://lists.sourceforge.net/lists/listinfo/limesurvey-developers |