First Party Sets
By relying on organizational ownership as the sole mechanism of trust, this advantages vertically-integrated organizations over those that rely on supply-chain partners. This runs counter to the general goal on the web of supporting decentralization.
- How much ownership is required for different domains to be allowed to share personal data?
- How much awareness among the general public is required for different domains to be allowed to share personal data?
- Must users be made aware of the ownership linkages prior to any personal data sharing?
- How much control should people have to keep their identity distinct from the various sites within such a "first party set"?