<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content="text/html; charset=us-ascii" http-equiv=Content-Type><BASE
href="x-msg://551/">
<META name=GENERATOR content="MSHTML 8.00.6001.19046"></HEAD>
<BODY
style="WORD-WRAP: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space">
<DIV><SPAN class=475302720-28042011></SPAN><FONT face=Arial><FONT
color=#0000ff><FONT
size=2>I think the browser side of HoK is not problematic<SPAN
class=475302720-28042011> compared to the RP side</SPAN>.<SPAN
class=475302720-28042011> How are we going to convince the RP to change
their systems to accept the key?</SPAN></FONT></FONT></FONT></DIV>
<DIV><SPAN class=475302720-28042011></SPAN><FONT face=Arial><FONT
color=#0000ff><FONT size=2><SPAN class=475302720-28042011>Well maybe the browser
side isn't that simple. The current certificate related UIs are a
pain.</SPAN> <SPAN
class=475302720-28042011></SPAN></FONT></FONT></FONT><BR></DIV>
<DIV><SPAN class=475302720-28042011><FONT color=#0000ff size=2
face=Arial>Regarding your NASCAR comment: The openid input field does not have
to be visible to be discoverable by the addon. This way the RP can have its
layout and the addon will not interfere with it.</FONT></SPAN></DIV>
<DIV><SPAN class=475302720-28042011><FONT color=#0000ff size=2 face=Arial>This
problem is that the RP site must work with our without the addon beeing there
(at least for some time). Which was one of Information Cards problems.
Self-Issued Information Cards without claims implement HoK but then the
card metaphore is not the best one in this case.</FONT></SPAN></DIV>
<DIV><SPAN class=475302720-28042011><FONT color=#0000ff size=2
face=Arial></FONT></SPAN> </DIV><BR>
<BLOCKQUOTE
style="BORDER-LEFT: #0000ff 2px solid; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; MARGIN-RIGHT: 0px"
dir=ltr>
<DIV dir=ltr lang=de class=OutlookMessageHeader align=left>
<HR tabIndex=-1>
<FONT size=2 face=Tahoma><B>From:</B> John Bradley [mailto:ve7jtb@ve7jtb.com]
<BR><B>Sent:</B> Thursday, April 28, 2011 10:03 PM<BR><B>To:</B> Nennker,
Axel<BR><B>Cc:</B> openid-general@lists.openid.net; thunder@mozilla.com;
mhanson@mozilla.com<BR><B>Subject:</B> Re: [OpenID] Verisign
Seatbelt<BR></FONT><BR></DIV>
<DIV></DIV>There was a way for other openID providers to get added to
Seatbealt. On the other hand I don't know that it worked better than
the FF extension you just did. It also relied on RP tagging the
input box as I recall. With NASCAR type interfaces that is becoming less
and less common.
<DIV><BR></DIV>
<DIV>From a security point of view I would like to be able to gat at a way to
do holder of Key in the browser. </DIV>
<DIV><BR></DIV>
<DIV>John B.<BR>
<DIV>
<DIV>On 2011-04-28, at 3:30 PM, <<A
href="mailto:Axel.Nennker@telekom.de">Axel.Nennker@telekom.de</A>> <<A
href="mailto:Axel.Nennker@telekom.de">Axel.Nennker@telekom.de</A>>
wrote:</DIV><BR class=Apple-interchange-newline>
<BLOCKQUOTE type="cite"><SPAN
style="WIDOWS: 2; TEXT-TRANSFORM: none; TEXT-INDENT: 0px; BORDER-COLLAPSE: separate; FONT: medium Helvetica; WHITE-SPACE: normal; ORPHANS: 2; LETTER-SPACING: normal; WORD-SPACING: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px"
class=Apple-style-span>
<DIV lang=EN-US vlink="purple" link="blue">
<DIV><SPAN class=721441919-28042011><FONT size=2
face=Arial>Hi,</FONT></SPAN></DIV>
<DIV><SPAN class=721441919-28042011><FONT size=2
face=Arial></FONT></SPAN> </DIV>
<DIV><SPAN class=721441919-28042011><FONT size=2 face=Arial>I just stumbled
over Verisign's Seatbelt browser extension again. Here is the HTML link to
the config from the source code of<SPAN
class=Apple-converted-space> </SPAN><A
style="COLOR: blue; TEXT-DECORATION: underline"
href="https://pip.verisignlabs.com/">https://pip.verisignlabs.com/</A>.</FONT></SPAN></DIV>
<DIV><SPAN class=721441919-28042011><FONT size=2 face=Arial></FONT><PRE id=line17><FONT size=2 face=Arial> <<SPAN class=start-tag>link</SPAN><SPAN class=attribute-name> rel</SPAN>=<SPAN class=attribute-value>"seatbelt.config" </SPAN><SPAN class=attribute-name>type</SPAN>=<SPAN class=attribute-value>"application/xml" </SPAN><SPAN class=attribute-name>href</SPAN><SPAN>="</SPAN><A style="COLOR: blue; TEXT-DECORATION: underline" href="view-source:https://pip.verisignlabs.com/web/brand/default/seatbelt/seatbeltcfg.xml">https://pip.verisignlabs.com/web/brand/default/seatbelt/seatbeltcfg.xml</A><SPAN>" </SPAN><SPAN class=error><SPAN class=attribute-name>/</SPAN></SPAN>><BR>
</FONT><SPAN class=721441919-28042011><FONT size=2 face=Arial><BR><BR>I guess that Seatbelt is not very widely deployed today...</FONT></SPAN></PRE></SPAN></DIV>
<DIV><SPAN class=721441919-28042011><FONT size=2 face=Arial>In the light of
"Identity in the Browser": What would we do differently
today?</FONT></SPAN></DIV>
<DIV><SPAN class=721441919-28042011><FONT color=#0000ff size=2 face=Arial><A
style="COLOR: blue; TEXT-DECORATION: underline"
href="http://www.w3.org/2011/identity-ws/">http://www.w3.org/2011/identity-ws/</A></FONT></SPAN></DIV>
<DIV><SPAN class=721441919-28042011><FONT color=#0000ff size=2
face=Arial></FONT></SPAN> </DIV>
<DIV><SPAN class=721441919-28042011><FONT size=2 face=Arial>Seatbelt has
similarities to Mozilla's AccountManager which is now dead (it
seems).</FONT></SPAN></DIV>
<DIV><SPAN class=721441919-28042011><FONT size=2 face=Arial>Seatbelt favored
Verisign's OpenID provider which I think was one reason others did not
accept it.</FONT></SPAN></DIV>
<DIV><SPAN class=721441919-28042011><FONT size=2
face=Arial></FONT></SPAN> </DIV>
<DIV><SPAN class=721441919-28042011><FONT size=2 face=Arial>Does it make
sense to generalize Seatbelt and standardize it into
browsers?</FONT></SPAN></DIV>
<DIV><SPAN class=721441919-28042011><FONT size=2
face=Arial></FONT></SPAN> </DIV>
<DIV><SPAN class=721441919-28042011><FONT size=2
face=Arial>regards</FONT></SPAN></DIV>
<DIV><SPAN class=721441919-28042011><FONT size=2
face=Arial>Axel</FONT></SPAN></DIV>
<DIV><SPAN class=721441919-28042011><FONT size=2
face=Arial></FONT></SPAN> </DIV>
<DIV><SPAN class=721441919-28042011><PRE id=line1><SPAN class=pi><?xml version="1.0" encoding="utf-8"?></SPAN>
<<SPAN class=start-tag>opConfig</SPAN><SPAN class=attribute-name> version</SPAN>=<SPAN class=attribute-value>"1.0"
</SPAN><SPAN class=attribute-name>serverIdentifier</SPAN>=<SPAN class=attribute-value>"<A style="COLOR: blue; TEXT-DECORATION: underline" href="http://pip.verisignlabs.com">pip.verisignlabs.com</A>"</SPAN>>
<<SPAN class=start-tag>configRevision</SPAN>>1.1.02</<SPAN class=end-tag>configRevision</SPAN>>
<<SPAN class=start-tag>title</SPAN>>Symantec Personal Identity Provider</<SPAN class=end-tag>title</SPAN>>
<<SPAN class=start-tag>description</SPAN>>Manage your online identity without compromising your privacy.</<SPAN class=end-tag>description</SPAN>>
<<SPAN class=start-tag>loginUrl</SPAN>>https://pip.verisignlabs.com/login.do</<SPAN class=end-tag>loginUrl</SPAN>>
<<SPAN class=start-tag>welcomeUrl</SPAN>>https://pip.verisignlabs.com/home_page.do</<SPAN class=end-tag>welcomeUrl</SPAN>>
</PRE><PRE id=line9> <<SPAN class=start-tag>loginStateUrl</SPAN>>https://pip.verisignlabs.com/RPInterface</<SPAN class=end-tag>loginStateUrl</SPAN>>
<<SPAN class=start-tag>opDomain</SPAN>>pip.verisignlabs.com</<SPAN class=end-tag>opDomain</SPAN>>
<<SPAN class=start-tag>opCertSHA1Hash</SPAN>>99:FB:5C:4D:71:62:5F:1F:A8:D8:37:91:C2:AC:AE:53:86:DC:8B:12</<SPAN class=end-tag>opCertSHA1Hash</SPAN>>
<<SPAN class=start-tag>opCertCommonName</SPAN>>pip.verisignlabs.com</<SPAN class=end-tag>opCertCommonName</SPAN>>
<<SPAN class=start-tag>settingsIconUrl</SPAN>>https://pip.verisignlabs.com/web/brand/default/seatbelt/check30x30.png</<SPAN class=end-tag>settingsIconUrl</SPAN>>
<<SPAN class=start-tag>toolbarGrayIconUrl</SPAN>>https://pip.verisignlabs.com/web/brand/default/seatbelt/pip_logo_gray_16x16.jpg</<SPAN class=end-tag>toolbarGrayIconUrl</SPAN>>
</PRE><PRE id=line15> <<SPAN class=start-tag>toolbarHighIconUrl</SPAN>>https://pip.verisignlabs.com/web/brand/default/seatbelt/pip_logo_16x16.jpg</<SPAN class=end-tag>toolbarHighIconUrl</SPAN>>
<<SPAN class=start-tag>toolbarGrayBackground</SPAN>>#D6D6D6</<SPAN class=end-tag>toolbarGrayBackground</SPAN>>
<<SPAN class=start-tag>toolbarHighBackground</SPAN>>#FECF71</<SPAN class=end-tag>toolbarHighBackground</SPAN>>
<<SPAN class=start-tag>toolbarLoginBackground</SPAN>>#74D174</<SPAN class=end-tag>toolbarLoginBackground</SPAN>>
<<SPAN class=start-tag>toolbarGrayBorder</SPAN>>#7C7C7C</<SPAN class=end-tag>toolbarGrayBorder</SPAN>>
<<SPAN class=start-tag>toolbarHighBorder</SPAN>>#730027</<SPAN class=end-tag>toolbarHighBorder</SPAN>>
</PRE><PRE id=line21> <<SPAN class=start-tag>toolbarLoginBorder</SPAN>>#2B802B</<SPAN class=end-tag>toolbarLoginBorder</SPAN>>
<<SPAN class=start-tag>toolbarGrayText</SPAN>>#666666</<SPAN class=end-tag>toolbarGrayText</SPAN>>
<<SPAN class=start-tag>toolbarHighText</SPAN>>#730027</<SPAN class=end-tag>toolbarHighText</SPAN>>
<<SPAN class=start-tag>toolbarLoginText</SPAN>>#FFFFFF</<SPAN class=end-tag>toolbarLoginText</SPAN>>
</<SPAN class=end-tag>opConfig</SPAN>>
</PRE></SPAN></DIV>_______________________________________________<BR>general
mailing list<BR><A style="COLOR: blue; TEXT-DECORATION: underline"
href="mailto:general@lists.openid.net">general@lists.openid.net</A><BR><A
style="COLOR: blue; TEXT-DECORATION: underline"
href="http://lists.openid.net/mailman/listinfo/openid-general">http://lists.openid.net/mailman/listinfo/openid-general</A><BR></DIV></SPAN></BLOCKQUOTE></DIV><BR></DIV></BLOCKQUOTE></BODY></HTML>