<br><br>---------- Forwarded message ----------<br><span class="gmail_quote">From: <b class="gmail_sendername">Bruce Wang</b> <<a href="mailto:number5@gmail.com">number5@gmail.com</a>><br>Date: Feb 13, 2007 4:30 PM<br>
Subject: Re: [OpenID] No benefits of XRI i-names/i-numbers as OpenIDs (was: is openid 2.0 a lightweight identity system?)<br>To: Stephane Bortzmeyer <<a href="mailto:bortzmeyer@nic.fr">bortzmeyer@nic.fr</a>><br><br>
</span><br><br><div><span class="q"><span class="gmail_quote">On 2/13/07, <b class="gmail_sendername">Stephane Bortzmeyer</b> <<a href="mailto:bortzmeyer@nic.fr" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">
bortzmeyer@nic.fr</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
On Mon, Feb 12, 2007 at 12:21:19AM -0800,<br> Drummond Reed <<a href="mailto:drummond.reed@cordance.net" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">drummond.reed@cordance.net</a>> wrote<br>
a message of 80 lines which said:<br><br>> though persistence is probably the most important one. When I
<br>> explain to someone new to OpenID that if they use a URL as their<br>> OpenID, and they ever lose the registration of that URL, someone can<br>> take over their OpenID identity COMPLETELY, they have a pretty
<br>> strong reaction. It's a bigger issue than most folks realize<br><br>And it is mostly FUD. A *lot* of organizations spread FUD on URL and<br>try to sell a "permanent" registration service. Probably because they
<br>are jealous of Verisign and would like to earn a market share like<br>them. XRI is just one of the smallest and less credible contenders in<br>that area.<br><br>They forget that "permanent" is an administrative issue, not a
<br>technical one. It is easy to have permanent URI. Permanent URL are<br>more difficult but it is the same thing for any other "permanent"<br>scheme. If <a href="http://xdi.org" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">
xdi.org</a> collapses, what will become of your "permanent"
<br>XRI?</blockquote></span><div><br>+1<br><br>The most thing I love of OpenID is that it's a *decentralized* identity system, anyone with enough knowledge could setup a OpenID server in minutes, and with YADIS delegation support you can switch your IdP in seconds, so there is no single failure point, and there is no Big Brother could control or monitor everything.
<br><br>Yes, the url scheme still depends on DNS system, but DNS system is an *open system* and running successfully for decades to support the Internet. We all known how DNS system work and trusted it for a very long time.
<br><br>So please don't make simple things complicated, i-names could be easily support using <a href="http://idproxy.net" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">idproxy.net</a> like proxy, we don't need it in the core OpenID spec.
<br><br><br></div><br>
</div><br><br><br>-- <br>simple is good<br><a href="http://brucewang.net" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">http://brucewang.net</a><br>skype: number5
<br clear="all"><br>-- <br>simple is good<br><a href="http://brucewang.net">http://brucewang.net</a><br>skype: number5