syaifulnizamiphone7 commented on issue #125:
URL: https://github.com/apache/whimsy/issues/125#issuecomment-2432694597

   > ICLAs are currently filed using a filename stem based on the full name.
   > 
   > This approach increasingly suffers from collisions; it also has the 
potential to expose PII.
   > 
   > We need to find a different identifier where the likelihood of collisions 
is very small. Unfortunately humans don't have a unique immutable identifier, 
at least not one which is likely to be accessible to us. So some other ID needs 
to be found.
   > 
   > Some possibilities to consider:
   > 
   > * UUID generated at time of filing
   > * hash of the ICLA file
   > * email address (canonicalised if necessary to generate a valid file name 
stem)
   > 
   > Assuming two people don't share the same email address, all the above 
should be collision-free for distinct people.
   > 
   > Any others?
   > 
   > Note that whilst the above ids will uniquely identify an ICLA, additional 
ICLAs from the same person will generally have different ids (email may or may 
not be the same). This is also true of the full name used in ICLAs: apart from 
ICLAs which are sent to record a change of name, we sometimes get ICLAs with a 
different spelling of a name, or with changes to the given names.
   > 
   > The current approach for replacement ICLAs is to create a directory and 
store all the ICLAs in the same directory. If email address is used, something 
similar would be needed. For the other IDs, the list of files in a directory 
would need to be replaced with a list of IDs in the index.
   
   update files
   
![E22EAA2C-13BA-4CAE-AF8B-9A3BB738D377](https://github.com/user-attachments/assets/8aa92489-37c6-4ba7-9b97-3d3cdebe39ed)
   
![1F97D8A8-F0E1-4CF2-B01B-F1C824060C2C](https://github.com/user-attachments/assets/6c39c1cc-7a58-444b-8c24-f5d60f06e6e2)
   
![00FA5B0D-BBA4-4F7E-9CDB-E1D1EA19AAF4](https://github.com/user-attachments/assets/0fd10a8e-b9cd-4187-955d-cadf1543b9f4)
   
![3155264E-215E-4A72-9A7B-FDE9234E9E9C](https://github.com/user-attachments/assets/db4dd38a-ff85-45a6-b6a0-98e9d7a6e42c)
   
![25F689AA-5D0F-4CBF-AD2D-228B3C41C6C1](https://github.com/user-attachments/assets/3c1fed71-1e0d-4009-95e8-f6e7bdb8ecac)
   
![092866C5-AE27-4C23-82E2-FB545A2C5ED8](https://github.com/user-attachments/assets/576c3900-3850-469d-a0a6-bf7186ff5547)
   
[coverage.txt](https://github.com/user-attachments/files/17494811/coverage.txt)
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@whimsical.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to