<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">When you use Magic signature you wind up with a JSON object as the result. <div><br></div><div>The nice thing about doing it Key-Value is that the OP can sign it on spec and the RP can ignore it.</div><div><br></div><div>If we go with JSON the OP needs to be sure the RP can take the JSON wrapped Key-Value form.</div><div><br></div><div>The other downside of Magic signature is that they chose a signature padding method as the default that is not optimal for some Government uses.</div><div>It may be deprecated in the standards eventually. We would create a profile to extend the supported algorithms, not a big deal.</div><div><br></div><div>It also seems to be designed for raw keys. I don't think the certificate is included in the signature.</div><div><br></div><div>I am OK with using it but it seems not to have a huge advantage.</div><div><br></div><div>John B.</div><div><div><div>On 2010-05-04, at 7:25 PM, Nat Sakimura wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite">Hi. <div><br></div><div>I have finally done the editing for draft 04. </div><div>Hopefully, I have captured the comments made by you guys. </div><div><br></div><div>As usual, the repository is http:/<a href="http://bitbucket.org/openid/ab/">bitbucket.org/openid/ab/</a> </div>
<div><br></div><div>Browser readable version without downloading the repository is here: </div><div><br></div><div><a href="http://www.sakimura.org/specs/ab/">http://www.sakimura.org/specs/ab/</a></div><div><br></div><div>
Several Questions still remains. </div><div><br></div><div>1. Should we be using Key-Value form encoding when we are signing the assertion by Magic Signature, </div><div> or should we standardize on JSON? </div><div>2. Is Magic Signature OK as a signature format? </div>
<div><br></div><div>Other comments are welcome. </div><div><br>-- <br>Nat Sakimura (=nat)<br><a href="http://www.sakimura.org/en/">http://www.sakimura.org/en/</a><br><a href="http://twitter.com/_nat_en">http://twitter.com/_nat_en</a><br>
</div>
_______________________________________________<br>Openid-specs-ab mailing list<br><a href="mailto:Openid-specs-ab@lists.openid.net">Openid-specs-ab@lists.openid.net</a><br>http://lists.openid.net/mailman/listinfo/openid-specs-ab<br></blockquote></div><br></div></body></html>