Another view of your question is for an OPES box bridging into an enterprise (one administrative domain).
Wayne, Assume one company has 100 users. The company has subscribed a request/response checking service on all the requests sent by these 100 users. This service is not requested by either Content Provider or End user. So, does this violate the OPES requirements for Privacy and Integrity?
-Weisong
Michael W. Condry Director, Network Edge Technology