Hehe Peter, as all stories go, Let us leave the inference and conclusions to the readers.<div><br><br><div class="gmail_quote">On Tue, Oct 27, 2009 at 11:22 PM, Peter Williams <span dir="ltr"><<a href="mailto:home_pw@msn.com">home_pw@msn.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"><br>
You not *still* on the xrd.subject vs xrd.ietf.scopes conspiracy, are you?<br>
<br>
Omitting xrd.subject just allows a security context/container to play its<br>
role. (The most rationale context is an https cert with domain-check<br>
assertion authenticating the https session over which one pulls the<br>
host-meta stream. Alternatively, per the standard, sign it per the XRD 1.0<br>
spec and populate subject.)<br>
<br>
I could see the case for requiring host-meta spec from IETF to disdclose HOW<br>
one would PROPERLY ppulate subekct, in the case that the XRD is signed. Why<br>
not make the case to the WG (else threaten them with raising the issue<br>
during WG and then IESG last call )<br>
<br>
-----<br>
<br>
Im obviously getting far too old for facebook. I didnt recognise the sound<br>
of the identity url you posted :-(. it's cute (in English)<br>
<br>
<br>
<br>
Santosh Rajan wrote:<br>
><br>
> ...<br>
<div class="im">><br>
> Unfortunately I have a problem with this idea, even though I like it,<br>
> this is not the way to do it. The problem is that if you want to<br>
> legitimize "acct:" you need to be a software engineer contortionist.<br>
> You need to "Reject" Subject from the host-meta, and you need to add<br>
> "Scope" into the host-meta.<br>
</div>> ...<br>
> --<br>
> <a href="http://hi.im/santosh" target="_blank">http://hi.im/santosh</a><br>
> ...<br>
><br>
<font color="#888888"><br>
--<br>
View this message in context: <a href="http://www.nabble.com/host-meta-and-%22acct%3A%22-tp26079872p26082181.html" target="_blank">http://www.nabble.com/host-meta-and-%22acct%3A%22-tp26079872p26082181.html</a><br>
</font><div><div></div><div class="h5">Sent from the OpenID - General mailing list archive at Nabble.com.<br>
<br>
_______________________________________________<br>
general mailing list<br>
<a href="mailto:general@lists.openid.net">general@lists.openid.net</a><br>
<a href="http://lists.openid.net/mailman/listinfo/openid-general" target="_blank">http://lists.openid.net/mailman/listinfo/openid-general</a><br>
</div></div></blockquote></div><br><br clear="all"><br>-- <br><a href="http://hi.im/santosh">http://hi.im/santosh</a><br><br><br>
</div>