<HTML dir=ltr><HEAD><TITLE>Re: [OpenID] OpenID Description?</TITLE></HEAD>
<BODY>
<DIV id=idOWAReplyText94603 dir=ltr>
<DIV dir=ltr><FONT face=Arial color=#000000 size=2>Long missing, Drummond. Id have re-posted your/Neustar article on my site (to save internet2 bandwidth (joke)) but for the legal notices. I've yet to get to the Fletcher paper. My opinion of Neustar just flipped (to the positive).</FONT></DIV>
<DIV dir=ltr><FONT face=Arial size=2></FONT> </DIV>
<BLOCKQUOTE dir=ltr style="MARGIN-RIGHT: 0px">
<DIV dir=ltr><FONT size=2>If you want a deeper analysis of that feature, plus other privacy-related<BR>features of OpenID, one reference is a paper on OpenID discovery I gave last<BR>month at the IDtrust Symposium:<BR><BR> <BR><A href="http://middleware.internet2.edu/idtrust/2008/papers/01-reed-openid-xri-xrds" target=_blank>http://middleware.internet2.edu/idtrust/2008/papers/01-reed-openid-xri-xrds</A>.<BR>pdf <BR><BR>George Fletcher of AOL also gave another OpenID paper there:<BR><BR> <BR><A href="http://middleware.internet2.edu/idtrust/2008/slides/11-fletcher-openid.pdf" target=_blank>http://middleware.internet2.edu/idtrust/2008/slides/11-fletcher-openid.pdf</A><BR><BR></FONT><FONT size=2></DIV></BLOCKQUOTE>
<P dir=ltr><FONT size=3>Reed, Chasen & Tan assert in <U><FONT color=#0066cc>01-reed-openid-xri-xrds</FONT></U>.pdf (see above) that "The second option is for each XRDS document in the resolution chain to include a signed SAML assertion that resolvers can verify via public key information discovered in the previous XRDS. The two options are not exclusive; indeed the specification recommends that SAML trusted resolution be used in conjunction "</FONT></P>
<P dir=ltr><FONT size=3>Now that paragraph gets my attention. Anyone playing with code that address this case? Sounds like we something akin to PKIX chain processing, but with something a bit more modern and less hampered by the requirements of defense agencies to address legacy systems issues.</FONT></P>
<P dir=ltr><FONT size=3>Peter.</FONT></P>
<DIV dir=ltr><BR>> -----Original Message-----<BR>> From: general-bounces@openid.net [<A href="mailto:general-bounces@openid.net" target=_blank>mailto:general-bounces@openid.net</A>] On<BR>> Behalf Of Stephen Edgar<BR>> Sent: Thursday, April 17, 2008 2:38 AM<BR>> To: openid-general List<BR>> Subject: [OpenID] OpenID Description?<BR>><BR>> Hi OpenID List!<BR>><BR>> This is my first post to the list and I am not bad myself on understanding<BR>> OpenID and some implementations on the tech front though I received via<BR>> another mail list the following and was hoping someone could point me to<BR>> some articles/links to address the following:-<BR>><BR>> <snip><BR>> Can anyone point to an accessible description of OpenID?<BR>><BR>> Like a lot of open source, the sites and the documentation are very<BR>> much by-geeks/for-geeks.<BR>><BR>> I suspect that it's just a latter-day MS Passport, but with:<BR>> - open specs<BR>> - more adopters (among corporations, if not among people)<BR>> - the scope for stronger linkage between the id and the entity<BR>> - the intention that each person have only one id<BR>><BR>> But I'd welcome any leads to a description or analysis somewhere<BR>> between the sales blarney at: <A href="http://www.openid.org/" target=_blank>http://www.openid.org/</A><BR>> and the highly segmented and detailed (and of course necessary)<BR>> tech-speak at: <A href="http://openid.net/developers/specs/" target=_blank>http://openid.net/developers/specs/</A><BR>><BR>> Thanks!<BR>><BR>> Roger Clarke <A href="http://www.anu.edu.au/people/Roger.Clarke/" target=_blank>http://www.anu.edu.au/people/Roger.Clarke/</A><BR>> Visiting Professor in Info Science & Eng Australian National University<BR>> Visiting Professor in the eCommerce Program University of Hong Kong<BR>> Visiting Professor in the Cyberspace Law & Policy Centre Uni of NSW<BR>> </snip><BR>><BR>><BR>> Regards,<BR>><BR>> Stephen Edgar<BR>> Stephen@netweb.com.au<BR>><BR>> _______________________________________________<BR>> general mailing list<BR>> general@openid.net<BR>> <A href="http://openid.net/mailman/listinfo/general" target=_blank>http://openid.net/mailman/listinfo/general</A><BR><BR>_______________________________________________<BR>general mailing list<BR>general@openid.net<BR><A href="http://openid.net/mailman/listinfo/general" target=_blank>http://openid.net/mailman/listinfo/general</A><BR></DIV></FONT></DIV></BODY></HTML>