<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 12 (filtered medium)">
<base href="x-msg://1639/"><style>
<!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.apple-style-span
{mso-style-name:apple-style-span;}
span.apple-converted-space
{mso-style-name:apple-converted-space;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page Section1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.Section1
{page:Section1;}
-->
</style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-AU" link="blue" vlink="purple" style="word-wrap: break-word;
-webkit-nbsp-mode: space;-webkit-line-break: after-white-space">
<div class="Section1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D">John,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> </span>Host-meta doesn't provide the OP.<o:p></o:p></p>
<p class="MsoNormal"><span style="color:#1F497D">> </span>It provides a mapping from some identifier to a XRD for that identifier.<o:p></o:p></p>
<p class="MsoNormal"><span style="color:#1F497D">> </span>It is the target XRD for the user that specifies the OP.<o:p></o:p></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D">Thanks for reminding me of the extra layer of indirection.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D">That does mean a solution where host-meta takes precedence still has some flexibility to handle, say, a different OP for just a few special OpenID URIs on
a site.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D">Host-meta now uses the XRD syntax. It no longer just looks like a mapping from identifiers to the metadata (XRD) for each identifier. It now looks like common
metadata (XRD) for a host of identifiers, optionally with a reference to more identifier-specific metadata (XRD).<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D">If host-meta can say: the ‘describedby’ link for all URIs at this host is xyz; why shouldn’t it say the ‘openid2.provider’ link for all URIs at this host
is abc? </span><span style="font-family:"Calibri","sans-serif";
color:#1F497D">The semantics seem to work, as long as RPs are looking for this relation in host-meta.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Calibri","sans-serif";color:#1F497D">A ‘describedby’ link in an XRD looks like an app-layer version of an HTTP redirect: you can have 0, 1, or more of them. [Perhaps an “@import url(…)” statement in a cascading
stylesheet is a better analogy, as it also has issues of merging data from various sources.]<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Calibri","sans-serif";color:#1F497D">I guess a higher layer, like OpenID, might choose to mandate that “there MUST be exactly 1 level of indirection” (ie host-meta SHALL specify a ‘describedby’ link, but no ‘openid*’
links; whereas an OpenID identifier’s XRD SHALL NOT include a ‘describedby’ link).<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span lang="FR" style="font-family:"Arial","sans-serif";
color:#1F497D">James Manger</span></b><span style="color:#1F497D">
<br>
<a href="mailto:James.H.Manger@team.telstra.com"><span lang="FR" style="font-size:10.0pt;font-family:"Arial","sans-serif"">James.H.Manger@team.telstra.com</span></a>
<br>
</span><span style="font-size:10.0pt;font-family:"Arial","sans-serif";
color:#1F497D">Identity and security team</span><span style="color:#1F497D">
</span><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:#1F497D">—</span><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D"> Chief Technology Office</span><span style="color:#1F497D">
</span><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:#1F497D">—</span><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#1F497D"> Telstra<o:p></o:p></span></p>
</div>
</body>
</html>