I think you're proposing a simple protocol to handle mapping from the subject to another URI that contains the actual XRD you want.<div><br></div><div>So for example, as a straw man, you could say "take the URI with rel <a href="http://ietf.org/service/resolve/xrd" target="_blank">http://ietf.org/service/resolve/xrd</a>, append a query parameter subject=<uri escaped value of subject>, and do a GET on the resulting URI. The response, if successful, is a 200 whose body consists of the URI to the actual desired XRD document".</div>
<div><br></div><div>The benefit of this would be that you would avoid the need for a URITemplate element and client binding of the {uri} variable to the subject. </div><div><br></div><div>The drawbacks are that you incur the need for an extra HTTP round trip, rather than just a client side template expansion, to discover the URI of the actual XRD you want; you need to define yet another protocol, albeit a small one, to do the retrieval; you need to run another service, albeit a trivial one, to do the mappings server side; and you need to answer some tricky questions about trust and security (if the resolver is not done over SSL and certs checked, this becomes another vector for MITM and DNS poisoning attacks).<div>
<br></div><div>--<br>John Panzer / Google<br><a href="mailto:jpanzer@google.com">jpanzer@google.com</a> / <a href="http://abstractioneer.org">abstractioneer.org</a> / @jpanzer<br><br>
<br><br><div class="gmail_quote">On Fri, Nov 13, 2009 at 6:18 PM, Santosh Rajan <span dir="ltr"><<a href="mailto:santrajan@gmail.com">santrajan@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
One of the purposes of the host-meta is to map a given URI to its XRD available on the server. Currently this is done by using a URITemplate.<div><URITemplate><a href="http://example.com/getxrd?q=%7Buri%7D" target="_blank">http://example.com/getxrd?q={uri}</a><URITemplate></div>
<div><br></div><div>Instead can the host-meta define a resolver service on the host, that returns an XRD given the Subject URI? eg. The host-meta can define a service on the server that accepts a GET or POST request with a single parameter passed whose key is "subject", and "value" is the subject URI to be resolved. In this case we only need a URI to the service on the server and can be written like this. </div>
<div><br></div><div><link rel="<a href="http://ietf.org/service/resolve/xrd" target="_blank">http://ietf.org/service/resolve/xrd</a>"</div><div> type="application/xrd+xml"</div><div> href="<a href="http://example.com/getxrd" target="_blank">http://example.com/getxrd</a>"/></div>
<div><br></div><div>(the rel value is just an example)<br clear="all"><br></div><div>Advantages of this being</div><div>1) No need for template and template mapping</div><div>2) The idea is consistent with the host-meta being an aggregator of the XRD's available on the host.</div>
<div><br></div><div>Any reason this could be a bad idea?</div><div><br>-- <br><a href="http://hi.im/santosh" target="_blank">http://hi.im/santosh</a><br><br><br>
</div>
<br>_______________________________________________<br>
general mailing list<br>
<a href="mailto:general@lists.openid.net">general@lists.openid.net</a><br>
<a href="http://lists.openid.net/mailman/listinfo/openid-general" target="_blank">http://lists.openid.net/mailman/listinfo/openid-general</a><br>
<br></blockquote></div><br></div></div>