<HTML><BODY style="word-wrap: break-word; -khtml-nbsp-mode: space; -khtml-line-break: after-white-space; ">There seem to be at least two variations of attestation if we differentiate by how quickly the underlying statement (claim, ...) may change. E.g.<DIV><BR class="khtml-block-placeholder"></DIV><DIV>1. long-term: X is a citizen of country Y. If it changes at all, it takes years.</DIV><DIV>2. short-term: X is in the same room with me. It changes minute by minute.</DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV>In the first case, we can do things like sign a claim and show that signed claim every time somebody asks. In the second, we might have to ask the asserting party in real time?</DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV><BR class="khtml-block-placeholder"><DIV><DIV><DIV>On Apr 5, 2007, at 7:33, McGovern, James F ((HTSC, IT)) wrote:</DIV><BR class="Apple-interchange-newline"><BLOCKQUOTE type="cite"><P><FONT size="2" face="Arial">The term attestation has a distinct legal meaning but within an IT context may be used interchangably with the notion of certification or periodic review. There are of course several levels of attestation. I propose that minimally OpenID incorporate the first notion where someone certifies you are who you say you are.</FONT></P><P><FONT size="2" face="Arial">In an enterprise environment, a manager may attest that a particular employee is still employed by them. In a user-centric world, if we could have the ability to digitally "sign" either a managed-card (in an enterprise setting) or across providers in a user setting along with capturing transactional attributes such as when it was signed, how long is this signature good for, the ability to revoke, etc we should be covered.</FONT></P><P><FONT size="2" face="Arial">Finally, an attestor should be able to choose from an enumeration of relationships such as spouse, manager/employer, service provider/customer, etc.</FONT></P><P><FONT size="2" face="Arial">What would it take to change the OpenID XML to incorporate?</FONT> </P> <FONT size="3"><BR> <BR> *************************************************************************<BR> This communication, including attachments, is<BR> for the exclusive use of addressee and may contain proprietary,<BR> confidential and/or privileged information. If you are not the intended<BR> recipient, any use, copying, disclosure, dissemination or distribution is<BR> strictly prohibited. If you are not the intended recipient, please notify<BR> the sender immediately by return e-mail, delete this communication and<BR> destroy all copies.<BR> *************************************************************************<BR> </FONT><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">_______________________________________________</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">specs mailing list</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><A href="mailto:specs@openid.net">specs@openid.net</A></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><A href="http://openid.net/mailman/listinfo/specs">http://openid.net/mailman/listinfo/specs</A></DIV> </BLOCKQUOTE></DIV><BR></DIV></DIV></BODY></HTML>