Consider the reputation service and the needs of both individual consumers and large organizations that are security conscious.

What will be the expectations and requirements of the customers?
Will small-scale consumers’ needs be different from those of enterprises?
Who owns the data that is being served from the reputation service?
What kinds of protections might a customer expect from other customers when accessing reputations?