Re: [apps-discuss] [OAUTH-WG] draft-jones-appsawg-webfinger-04

"Martin J. Dürst" <duerst@it.aoyama.ac.jp> Fri, 18 May 2012 10:26 UTC

Return-Path: <duerst@it.aoyama.ac.jp>
X-Original-To: apps-discuss@ietfa.amsl.com
Delivered-To: apps-discuss@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3FA2921F85F0 for <apps-discuss@ietfa.amsl.com>; Fri, 18 May 2012 03:26:35 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -99.371
X-Spam-Level:
X-Spam-Status: No, score=-99.371 tagged_above=-999 required=5 tests=[AWL=0.419, BAYES_00=-2.599, HELO_EQ_JP=1.244, HOST_EQ_JP=1.265, MIME_8BIT_HEADER=0.3, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xrmcb8fpMcPt for <apps-discuss@ietfa.amsl.com>; Fri, 18 May 2012 03:26:34 -0700 (PDT)
Received: from scintmta01.scbb.aoyama.ac.jp (scintmta01.scbb.aoyama.ac.jp [133.2.253.33]) by ietfa.amsl.com (Postfix) with ESMTP id 1A4AF21F8645 for <apps-discuss@ietf.org>; Fri, 18 May 2012 03:26:33 -0700 (PDT)
Received: from scmse01.scbb.aoyama.ac.jp ([133.2.253.231]) by scintmta01.scbb.aoyama.ac.jp (secret/secret) with SMTP id q4IAQSxx016289 for <apps-discuss@ietf.org>; Fri, 18 May 2012 19:26:28 +0900
Received: from (unknown [133.2.206.133]) by scmse01.scbb.aoyama.ac.jp with smtp id 0770_cb08_ede7a4ce_a0d3_11e1_a4dc_001d096c566a; Fri, 18 May 2012 19:26:28 +0900
Received: from [IPv6:::1] ([133.2.210.1]:46832) by itmail.it.aoyama.ac.jp with [XMail 1.22 ESMTP Server] id <S15C719E> for <apps-discuss@ietf.org> from <duerst@it.aoyama.ac.jp>; Fri, 18 May 2012 19:26:31 +0900
Message-ID: <4FB623C9.9090904@it.aoyama.ac.jp>
Date: Fri, 18 May 2012 19:26:17 +0900
From: "\"Martin J. Dürst\"" <duerst@it.aoyama.ac.jp>
Organization: Aoyama Gakuin University
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.9) Gecko/20100722 Eudora/3.0.4
MIME-Version: 1.0
To: "Paul E. Jones" <paulej@packetizer.com>
References: <9452079D1A51524AA5749AD23E00392810E4CA@exch-mbx901.corp.cloudmark.com> <CAKaEYhKx0-psqSzLVHuiNiwvWXw28Fo1gDxr5u_Gsv5+K4wy0w@mail.gmail.com> <069A5A7D-16DE-463A-B857-9A39EA2F46DC@ve7jtb.com> <CA+aD3u3u82BfZWgFNUUhzt1QuJh+V=AXjV+JChc9Qm=q-sZorQ@mail.gmail.com> <5D4CF0B8-55C2-4741-AA51-5E93256AEB19@ve7jtb.com> <00f601cd32ee$cd2ebd10$678c3730$@packetizer.com> <4FB3545F.4050408@ninebynine.org> <CAKaEYh++Zdtzo2V1LxpjqNFK6Cw6XpXDwE97fQeAk0dk2P_+ug@mail.gmail.com> <4FB4F784.8040409@ninebynine.org> <39D4A035-89F9-4EE8-BAEE-0BDF2B11F291@ve7jtb.com> <010601cd345b$4bc25e30$e3471a90$@packetizer.com>
In-Reply-To: <010601cd345b$4bc25e30$e3471a90$@packetizer.com>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 7bit
Cc: 'Graham Klyne' <GK@ninebynine.org>, apps-discuss@ietf.org
Subject: Re: [apps-discuss] [OAUTH-WG] draft-jones-appsawg-webfinger-04
X-BeenThere: apps-discuss@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: General discussion of application-layer protocols <apps-discuss.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/apps-discuss>, <mailto:apps-discuss-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/apps-discuss>
List-Post: <mailto:apps-discuss@ietf.org>
List-Help: <mailto:apps-discuss-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/apps-discuss>, <mailto:apps-discuss-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 18 May 2012 10:26:35 -0000

This is a good point. Remember that email itself doesn't need nor use 
mailto:. It's HTML and other locations where mailto: is used.

Regards,   Martin.

On 2012/05/18 3:31, Paul E. Jones wrote:
> John,
>
>
>
> The "acct" URI would not be typed into an OpenID login box, but that does
> not mean it would never be used.  Users do not usually type in "xmpp:" or
> "mailto:", either, but they are nonetheless useful.  The "acct" URI scheme
> would be used similarly.  The query over the wire would request the XRD/JRD
> document for the account identified by that acct URI.
>
>
>
> Further, inside the XRD/JRD document, there may be link relations that allow
> a user to reference his or her other accounts at various services.  These
> references might allow WF queries to span across multiple domains and learn
> information such as where my photo stream is located, where my public file
> storage is located, etc.  It is a means of linking social networking
> accounts, etc.  I have this example earlier:
>
>
>
> <Link rel="acct" href="acct:paulej@cool_new_pic_service"/>
>
> <Link rel="acct" href="acct:10475893@cool_new_cloud_storage_service"/>
>
> <Link rel="acct" href="acct:543543@cool_new_social_network"/>
>
> <Link rel="acct" href="acct:paulej555@cool_new_whatever"/>
>
>
>
> These "href" values all refer to some kind of URI.  No current URI scheme is
> appropriate.  We can slaughter an existing one, but it's not the right
> solution, IMO.
>
>
>
> Paul
>
>
>
> From: apps-discuss-bounces@ietf.org [mailto:apps-discuss-bounces@ietf.org]
> On Behalf Of John Bradley
> Sent: Thursday, May 17, 2012 10:43 AM
> To: Graham Klyne
> Cc: apps-discuss@ietf.org
> Subject: Re: [apps-discuss] [OAUTH-WG] draft-jones-appsawg-webfinger-04
>
>
>
> Graham,
>
>
>
> The use of acct: is not dissimilar to the proposed use in Handle
> <http://www.itu.int/osg/csd/emerging_trends/handle_system/index.html>   or
> XRI<http://docs.oasis-open.org/xri/2.0/specs/xri-resolution-V2.0.html>
>
>
>
> It provides a new namespace for Identifiers and uses its own resolver WF to
> deference them to http uri for retrieval.
>
>
>
> Arguably Handle and XRI added persistence and other arguments that are not
> present in acct:/WF.
>
>
>
> As far as linking to a XRD document using acct: requiring the use of the WF
> resolver the XRD can just as easily contain the http URI enabling direct
> access.
>
>
>
> I can't see the requirement for a new scheme based simply on needing a new
> link relationship.
>
>
>
> Someone will also eventually notice that we are effectively duplicating the
> existing http: syntax for naming a user at a domain
> "http://jbradley@foo.com".
>
>
>
> If acct: is used simply as an identifier, that is never intended for a user
> to type then the argument for a new scheme is weak.
>
>
>
> If acct: is intended to be a new name resolution protocol (It is) then it is
> causing namespace fragmentation and breaking the semantic web.
>
>
>
> I have had the W3C TAG intervene on OASIS standards wanting to register a
> new scheme so I am cautious.
>
>
>
> Registering acct: vs info:acct: is important from a browser behaviour point
> of view if a user clicks on a link.
>
> What browser support do people anticipate for WF?   Do people expect to
> place acct:jbradley@foo.com as a link in a html document and have something
> useful happen if the user clicks on it?
>
> I know we did in XRI, and that was part of the scheme justification.
>
>
>
> WF should start the registration process for acct: now to enable the
> inevitable wider debate.
>
>
>
> Until there is at least a provisional registration, we probably should not
> make the scheme registration a requirement in the proposed starting
> document.
>
>
>
> John B.
>
>
>
>
>
> On 2012-05-17, at 9:05 AM, Graham Klyne wrote:
>
>
>
>
>
> On 17/05/2012 10:52, Melvin Carvalho wrote:
>
>
>
> I don't know about the particulars of your proposed acct: scheme, but as a
>
>>   thought experiment, does it achieve anything that could not be achieved
> as
>
>>   easily with (something like):
>
>>      http://acct.example.org/<your string here>
>
>>   ?
>
>>
>
>>   (Bearing in mind that it does not matter that
> thehttp://acct.example.org/URI  may be not dereferencable.)
>
>>
>
> Facebook do something quite similar to this with
>
> graph.facebook.com/user... my suggestion from the webfinger list was
>
> http://host/@/user, but there are possible deployment issues.
>
>
>
> One tricky thing with the approach suggested, is that you dont know whether
>
> you will be dealing with http or https until you try, so there's
>
> potentially an extra round trip.
>
>
> If the URI is being used primarily for identification purposes, and is not
> used operationally for dereferencing as-is, that seems a minor issue.  If
> the http: URI is also used to serve as a route to "follow-your-nose"
> high-level information, why would it be published using https?
>
> #g
> --
> _______________________________________________
> apps-discuss mailing list
> apps-discuss@ietf.org
> https://www.ietf.org/mailman/listinfo/apps-discuss
>
>
>
>
>
>
>
> _______________________________________________
> apps-discuss mailing list
> apps-discuss@ietf.org
> https://www.ietf.org/mailman/listinfo/apps-discuss