<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">The format of authority_hints are <superior>: [*<trust_root>]<div class=""><br class=""></div><div class="">So you should be able to figure out which paths you need to walk by checking if one of your trusted roots are in the list of roots for a </div><div class="">specific superior.</div><div class=""><br class=""></div><div class="">The format was chosen specifically to aid in the weeding out of unusable paths (paths ending in trust roots you don’t trust).<br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On 30 Oct 2018, at 19:34, Nick Roy via Openid-specs-ab <<a href="mailto:openid-specs-ab@lists.openid.net" class="">openid-specs-ab@lists.openid.net</a>> wrote:</div><br class="Apple-interchange-newline"><div class="">
<meta http-equiv="Content-Type" content="text/xhtml; charset=utf-8" class="">
<div class="">
<div style="font-family:sans-serif" class=""><div style="white-space:normal" class=""><p dir="auto" class="">Taking this back to the list because I am not an expert at this point.</p><p dir="auto" class="">Good point about DoS - Roland and Andreas, it would be really nice to know what federation(s) you are working with before you have to walk the tree. Any thoughts about that?</p><p dir="auto" class="">Nick</p><p dir="auto" class="">On 30 Oct 2018, at 12:25, Tom Jones wrote:</p>
</div>
<blockquote style="border-left:2px solid #777; color:#777; margin:0 0 5px; padding-left:5px" class=""><div id="D43E3975-0BBF-4CB5-A926-80D6A4EB23BA" class=""><meta http-equiv="Content-Type" content="text/html; charset=utf-8" class=""><div dir="ltr" class="">yes i know that it is possible to find the root, but i want to know before i even start doing any crypto.<div class="">That method is too prone to dos attacks.</div><div class="">I must get delayed email from oid as i have yet to see his response.<br clear="all" class=""><div class=""><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr" class=""><div class="">Peace ..tom</div></div></div></div><br class=""></div></div><br class=""><div class="gmail_quote"><div dir="ltr" class="">On Tue, Oct 30, 2018 at 11:22 AM Nick Roy <<a href="mailto:nroy@internet2.edu" class="">nroy@internet2.edu</a>> wrote:<br class=""></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi Tom,<br class="">
<br class="">
We won’t start implementing this within Internet2 quite yet. I need to free up some of my time to work on federation operation requirements/tooling needs, but I am still working on that (I hired two new people to take over federation operations, but they are still getting up to speed). I believe there are others at GÉANT who will implement it sooner. Looping in Davide Vaghetti from Consortium GARR/GÉANT to let you know about their plans.<br class="">
<br class="">
As Roland said in his reply to you on the list, the Federation Operator still exists in version 5. You discover the FO by walking the signed statement tree to its root, if I recall.<br class="">
<br class="">
Best,<br class="">
<br class="">
Nick<br class="">
<br class="">
On 30 Oct 2018, at 12:18, Tom Jones wrote:<br class="">
<br class="">
> Nick: Nice chatting with you at IIW. I reviewed draft 5 again and could not<br class="">
> determine why they think trust model and federation office should be<br class="">
> removed. I think we will stick with draft 4 now.<br class="">
> I also didn't see any version or other doc id.<br class="">
> I will use a mandatory field stating both version and FO in the body of the<br class="">
> json.<br class="">
> something like this<br class="">
> ver:OID FED 0.04<br class="">
> fo:IDEF<br class="">
><br class="">
> how has the internet 2 version progressed?<br class="">
><br class="">
> Peace ..tom<br class="">
</blockquote></div></div></blockquote>
<div style="white-space:normal" class=""><blockquote style="border-left:2px solid #777; color:#777; margin:0 0 5px; padding-left:5px" class="">
</blockquote></div>
</div>
</div>
_______________________________________________<br class="">Openid-specs-ab mailing list<br class=""><a href="mailto:Openid-specs-ab@lists.openid.net" class="">Openid-specs-ab@lists.openid.net</a><br class="">http://lists.openid.net/mailman/listinfo/openid-specs-ab<br class=""></div></blockquote></div><br class=""><div class="">
<div dir="auto" style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;">— Roland</div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><br class=""></div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;">The higher up you go, the more mistakes you are allowed. Right at the top, if you make enough of them, it's considered to be your style. </div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;">-Fred Astaire, dancer, actor, singer, musician, and choreographer (10 May 1899-1987)</div></div>
</div>
<br class=""></div></body></html>