[OIDFSC] OpenID Artifact Binding Working Group Proposal
Paul Madsen
paulmadsen at rogers.com
Fri Feb 5 18:34:20 UTC 2010
Are there not 2 pieces 1) an extension to carry the artifact and 2) a
new binding for dereferencing
paul
On 2/5/2010 11:01 AM, John Bradley wrote:
> This creates a new direct message type. I thought extensions were
> extending the existing messages.
>
> It is probably a grey area.
>
> Other protocols consider this to be a separate protocol binding rather
> than an extension of the redirect or POST binding.
>
> John B.
>
>
> On 2010-02-05, at 12:23 PM, David Recordon wrote:
>
>> Hey Nat,
>> Shouldn't this be considered an extension?
>>
>> --David
>>
>> On Fri, Feb 5, 2010 at 2:54 PM, Nat Sakimura <sakimura at gmail.com
>> <mailto:sakimura at gmail.com>> wrote:
>>
>> *OpenID Artifact Binding Working Group*
>> ------------------------------------------------------------------------
>> *Charter Proposal*
>> In accordance with the OpenID Foundation IPR policies and
>> procedures this note proposes the formation of a new working
>> group chartered to produce an OpenID specification. As per
>> Section 4.1 of the Policies, the proposed charter is below.
>> ------------------------------------------------------------------------
>> *I. Name*
>> Artifact Binding Working Group (AB)
>> ------------------------------------------------------------------------
>> *II. Statement of Purpose*
>> Produce a binding of OpenID requests and response (assertion)
>> that uses direct communication for main payload and indirect
>> communication for a small reference data called Artifact to cope
>> with long URL limits experienced by man
>> ------------------------------------------------------------------------
>> *III. Scope*
>> Create the Artifact Binding to support the identified needs.
>> Currently identified:
>>
>> * Cope with long url problem, especially for mobile browsers.
>> * Cope with the security problems of non-encrypted payload to
>> go through the user agents which may act as a
>> man-in-the-middle.
>>
>> ------------------------------------------------------------------------
>> *IV. Specifications*
>> OpenID Artifact Binding 1.0
>> ------------------------------------------------------------------------
>> *V. Anticipated audience*
>> All those interested in using OpenID in mobile and other
>> constrained browser and server elements.
>> ------------------------------------------------------------------------
>> *VI. Language of business*
>> English.
>> ------------------------------------------------------------------------
>> *VII. Method of work*
>> Mailing list discussion. Posting of intermediate drafts in the
>> OpenID Wiki. Virtual conferencing on an ad-hoc basis.
>> ------------------------------------------------------------------------
>> *VIII. Basis for completion of the activity*
>> The Artifact Binding 1.0 spec made final.
>> ------------------------------------------------------------------------
>> *Background Information*
>> ------------------------------------------------------------------------
>> *I. Related Work*
>> SAML Artifact Binding
>> OAuth
>> Wrap
>> Contract Exchange
>> ------------------------------------------------------------------------
>> *II. Initial Membership*
>>
>> * Breno de Medeiros, breno at google.com
>> <mailto:breno at google.com>. Google, Inc.
>> * Hideki Nara, hdknr at ic-tact.co.jp
>> <mailto:hdknr at ic-tact.co.jp>, Tact Communications
>> * Nat Sakimura, n-sakimura at nri.co.jp
>> <mailto:n-sakimura at nri.co.jp>, Nomura Research Institute,
>> Ltd. (editor)
>> * John Bradley, ve7jtb at ve7jtb.com <mailto:ve7jtb at ve7jtb.com>
>> * Allen Tom, atom at yahoo-inc.com <mailto:atom at yahoo-inc.com>,
>> Yahoo!
>> * Will Norris, will at willnorris.com <mailto:will at willnorris.com>
>>
>> ------------------------------------------------------------------------
>> *III. Expected contribution*
>>
>> Draft: OpenID Artifact Binding 1.0 - Draft 01,
>> http://www.sakimura.org/specs/ab/1.0/
>>
>> --
>> Nat Sakimura (=nat)
>> http://www.sakimura.org/en/
>> http://twitter.com/_nat_en
>>
>>
>> _______________________________________________
>> specs mailing list
>> specs at lists.openid.net <mailto:specs at lists.openid.net>
>> http://lists.openid.net/mailman/listinfo/openid-specs
>
>
> _______________________________________________
> specs mailing list
> specs at lists.openid.net
> http://lists.openid.net/mailman/listinfo/openid-specs
>
>
>
>
> No virus found in this incoming message.
> Checked by AVG - www.avg.com
> Version: 9.0.733 / Virus Database: 271.1.1/2669 - Release Date: 02/05/10 02:35:00
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs/attachments/20100205/223671bc/attachment.htm>
More information about the specs
mailing list