This is basically how public housing records work, right?
You basically cannot buy a house and keep your address private unless you route it through a trust or LLC. Even though the county won't up and tell you "Oh, Mr. ar_lan lives at 1234 Hacker Way", you can certainly just scrape all the data you want and construct a DB that then becomes searchable by name.
Seriously - unless the government steps in and has some sort of tunnel just between the user buying the ticket, and preventing them, without an airline employee somewhere in-between, this will just basically never be secure. I guess there could be some super severe auditing on the employeees w/ access - but that means these employees are now the ticketing agents, as well.
You basically cannot buy a house and keep your address private unless you route it through a trust or LLC. Even though the county won't up and tell you "Oh, Mr. ar_lan lives at 1234 Hacker Way", you can certainly just scrape all the data you want and construct a DB that then becomes searchable by name.
Seriously - unless the government steps in and has some sort of tunnel just between the user buying the ticket, and preventing them, without an airline employee somewhere in-between, this will just basically never be secure. I guess there could be some super severe auditing on the employeees w/ access - but that means these employees are now the ticketing agents, as well.