<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:blue;
text-decoration:underline;}
p.StyleTableTextArialBefore6ptAfter6pt, li.StyleTableTextArialBefore6ptAfter6pt, div.StyleTableTextArialBefore6ptAfter6pt
{margin-top:6.0pt;
margin-right:0in;
margin-bottom:6.0pt;
margin-left:0in;
font-size:10.0pt;
font-family:Arial;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:Arial;
color:navy;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang=EN-US link=blue vlink=blue>
<div class=Section1>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Peter,<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>The most important place to start is with
an understanding of the XRI entity space and the fundamentals of its two identifier
mappings. It is with this intent that I wrote the paper: </span></font><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'> <a
href="ftp://sandbox.myxdi.net/papers/context-sensitive-identifier-mappings.pdf"
title="ftp://sandbox.myxdi.net/papers/context-sensitive-identifier-mappings.pdf">ftp://sandbox.myxdi.net/papers/context-sensitive-identifier-mappings.pdf</a>
(and the other articles referenced therein.)<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>~ Steve<font color=navy><span style='color:navy'><o:p></o:p></span></font></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<div>
<div class=MsoNormal align=center style='text-align:center'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'>
<hr size=2 width="100%" align=center tabindex=-1>
</span></font></div>
<p class=MsoNormal><b><font size=2 face=Tahoma><span style='font-size:10.0pt;
font-family:Tahoma;font-weight:bold'>From:</span></font></b><font size=2
face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'>
general-bounces@openid.net [mailto:general-bounces@openid.net] <b><span
style='font-weight:bold'>On Behalf Of </span></b>Peter Williams<br>
<b><span style='font-weight:bold'>Sent:</span></b> Saturday, April 19, 2008
10:28 PM<br>
<b><span style='font-weight:bold'>To:</span></b> general@openid.net<br>
<b><span style='font-weight:bold'>Subject:</span></b> [OpenID] XRI semantics
and heavweight identity management</span></font><o:p></o:p></p>
</div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
<div id=idOWAReplyText77426>
<div>
<p class=MsoNormal><font size=2 color=black face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:black'>I'm reading </span></font><font
color=black><span style='color:black'><a
href="http://docs.oasis-open.org/xri/xri-resolution/2.0/specs/cd03/xri-resolution-V2.0-cd-03.pdf"
target="_blank"><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>http://docs.oasis-open.org/xri/xri-resolution/2.0/specs/cd03/xri-resolution-V2.0-cd-03.pdf</span></font></a></span></font><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'> very
carefully, aiming to fully understand OpenID2. My goal is to then go enhance my
RDF server so it can respond with some simple XRDS files, augmenting its native
metadata about service endpoints with FOAF data (to allow for intelligent
RDF-driven RPs). I don't aim to actually implement XRI Resolution. I just want
pretend to do so, for some simple XRDs and xri queries. Its a good learning
exercise; a good first step to get a feel for the algorithm and how one
tunes it all.</span></font><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'> <o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>There are a lot of procedures and identity semantics in the
specification. Its essentially a toolkit. How literally should I take all the
options, as they reflect on OpenID2? Can any and all of the options in the
document be leveraged when building an actual OP->RP relationship? Are any
and all the options "compatible" with OpenID infrastructure vision?</span></font><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'> <o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>For example, as a solution architect, I could specify that
an OP will operate a regime requiring only this or that durability of
resources, that equivID will be used in way X to accomplish Y per the spec,
that child and parent authorities will and will not be able to do certain
things - per choice of policies and setup, etc, that XRI references between
XRDs shall occur in this or that way. As a result, I could easily take the
toolkit and build a very unique and particular trust model, addressing the full
lifecycle of identity management in a distributed authority model.</span></font><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'> <o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>If I were to do all this "heavyweight identity
management", can I still be asserting at the end of the day that Im
"doing OpenID", in a manner "consistent with" the openid
culture, vision and community goals?</span></font><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'> <o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>I ask, as building such a trust model is rather different
culturally to the traditional context - in which a user goes stuff some meta
tags into a blogging HTML page, a user types in a URL at a URL, and
OP->RP flows send assertions over an authenticated channel! Such an
XRI-derived infrastructure is an entirely different kind of trust
management infrastructure, very much focused on notions of authority and is
very much contingent on RP recognizing that various third parties authorities
have various rights to speak (in different ways) for a particular user
identity.</span></font><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'> <o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=2 color=black face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:black'>Obviously, there is no one word sentence
answer to this question set. Its guidance I'm looking for</span></font><o:p></o:p></p>
</div>
</div>
<div id=idSignature3950>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'> <o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=1 color=black face=Arial><span style='font-size:
7.5pt;font-family:Arial;color:black'>_________________________<br>
</span></font><b><font size=2 color=black face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:black;font-weight:bold'>Peter Williams<o:p></o:p></span></font></b></p>
</div>
</div>
</div>
</body>
</html>