RFC 6973 Quiz

**Explanation:** A: RFC 6973 distinguishes observers from traditional attackers and evaluates context. B: A legitimate role can still create privacy harm through collection, compromise, or secondary use. C: Endpoints and intermediaries may see data by design and traffic patterns can remain observable.

**Explanation:** A: Identifier reuse primarily affects linkability rather than message framing. B: Stable identifiers do not inherently improve or reduce service uptime. C: A persistent identifier lets observers connect activities that users may expect to remain separate.

**Explanation:** A: Minimization reduces collection, exposure, retention, and later misuse opportunities. B: Speculative collection conflicts with minimizing unnecessary data. C: Encryption does not justify indefinite collection or retention.

**Explanation:** A: The main privacy issue is retained sensitive data, not only performance. B: Logs can outlive the purpose, be breached, or be reused beyond user expectations. C: Internal recipients and storage systems are still observers and compromise targets.

**Explanation:** A: Packet size, timing, endpoints, and protocol patterns can remain observable. B: A stable identifier can increase correlation rather than remove surveillance. C: Confidentiality protects content but does not automatically provide undetectability.

**Explanation:** A: Unexpected reuse can harm autonomy even when the original collection was authorized. B: That is a retry or replay issue rather than the privacy concept of secondary use. C: Infrastructure redundancy is not secondary use unless data purpose changes.

**Explanation:** A: Participation requires usable controls and is not achieved by documentation alone. B: These mechanisms let individuals influence how their data is exposed and used. C: Participation can instead support limiting information per recipient or intermediary.

**Explanation:** A: Analytics convenience does not by itself justify less protective defaults. B: Removing control can worsen user participation and requires explicit trade-off analysis. C: RFC 6973 asks designers to explain defaults that are less protective.

**Explanation:** A: Separate phase analysis reveals changing observers while the whole-flow view reveals cross-phase correlation. B: Earlier enablers and intermediaries may observe or retain equally sensitive data. C: Visibility, purpose, trust, and control differ by role and phase.

**Explanation:** A: Security benefits do not erase retention, disclosure, or secondary-use risks. B: This makes the costs and mitigations reviewable without assuming one answer fits every deployment. C: Late analysis creates stored-data exposure before minimization and controls are designed.