<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
there would appear to be an opportunity here for some drop-dead simple
cross-protocol harmonization by the larger community agreeing on the
definition of these sort of privacy policy identifiers by which a
requestor indicates its privacy commitments and the authority any
obligations.<br>
<br>
Define the various URIs and the associated semantics, and leave it to
the particular protocols or metadata formats to define bindings.<br>
<br>
Liberty took a first stab [1] a while back, but had/has no expectation
that the work would be meaningful if used only for Liberty/SAML
protocols.<br>
<br>
[1] -
<a class="moz-txt-link-freetext" href="http://www.projectliberty.org/liberty/content/download/4323/28921/file/draft-liberty-igf-privacy-constraints-v1.0-04.pdf">http://www.projectliberty.org/liberty/content/download/4323/28921/file/draft-liberty-igf-privacy-constraints-v1.0-04.pdf</a><br>
<br>
paul<br>
<br>
Dick Hardt wrote:
<blockquote cite="mid:3E423CB2-0D10-4546-8BE4-133FD6181B57@gmail.com"
type="cite">
<pre wrap="">On 2-Dec-08, at 3:41 PM, Allen Tom wrote:
</pre>
<blockquote type="cite">
<pre wrap="">We decided to build support for SREG before AX because SREG seems to
be
more widely used, and also because SREG allows the RP to pass the
url to
its privacy policy in the request. Strangely, AX does not have an
interface for the RP to pass its privacy policy to the OP.
</pre>
</blockquote>
<pre wrap=""><!---->
Not sure how we missed that feature in SREG. Our bad.
</pre>
<blockquote type="cite">
<pre wrap="">Moving forward, we'd also like to support both SREG and AX, if AX is
updated to allow the privacy policy url to be included in the request.
</pre>
</blockquote>
<pre wrap=""><!---->
Looking at what needs to be addressed in AX. Good suggestion. Ties in
with suggestions from Nat where the response with the privacy policy
is returned all signed by the OP.
</pre>
<blockquote type="cite">
<pre wrap="">
I'd be happy to help contribute to SREG and AX specs if the owners of
the spec would like me to.
</pre>
</blockquote>
<pre wrap=""><!---->
please!
_______________________________________________
specs mailing list
<a class="moz-txt-link-abbreviated" href="mailto:specs@openid.net">specs@openid.net</a>
<a class="moz-txt-link-freetext" href="http://openid.net/mailman/listinfo/specs">http://openid.net/mailman/listinfo/specs</a>
</pre>
</blockquote>
<br>
<div class="moz-signature">-- <br>
<a href="http://feeds.feedburner.com/%7Er/blogspot/gMwy/%7E6/1"><img
src="cid:part1.03030904.02070202@rogers.com" alt="ConnectID"
style="border: 0pt none ;"></a></div>
</body>
</html>