> BTW - I agree the device ID (i.e., the MAC address of the device the
> user is logged into) should not be included). But the entity=
> attribute as the AOR of the presentity is probably going to be there
> more of the time -- and should not be "SHOULD NOT linkable".
I had raised this question in last call, so as to clarify the usage and the degree to which the entity attribute might be linked to other identities, such as the HELD identity and the identity in the SIP From: header. IMHO, it is important to get clarity on this, if only to understand the security properties of the system.
