Currently discovery is _not_ dissociated from trust. Trust is established by having documents being recoverable from specific paths.<div><br></div><div>The new XRD proposal allows a different trust model based on signatures. There is nothing preventing clients from ignoring the new trust model and stick with the old one. They can ignore signatures and require documents to be available on designated paths. Of course, some sites (possibly a large percentage in the future) might launch discovery-based services where their discovery document is hosted elsewhere (typically because conforming to the strict location requirements of the current scheme would be too onerous). The simple clients that stick with the old model will not be able to use any of these services. But life remains simple for them. It is a cost/benefit choice that they can easily make.</div>
<div><br><div class="gmail_quote">On Thu, Jul 16, 2009 at 3:18 AM, Santosh Rajan <span dir="ltr"><<a href="mailto:santrajan@gmail.com">santrajan@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div id=":37" class="ii gt">Trust must be decoupled from discovery. We need to start with a simple basic<br>
discovery with no trust addressed. Then we need to add layers of trust in<br>
such a way that users and applications can pick and choose the level of<br>
trust they need.</div></blockquote></div><br><br clear="all"><br>-- <br>--Breno<br><br>+1 (650) 214-1007 desk<br>+1 (408) 212-0135 (Grand Central)<br>MTV-41-3 : 383-A <br>PST (GMT-8) / PDT(GMT-7)<br>
</div>