Re: [apps-discuss] What auth server supplies email addresses? Was webfinger discussion

[Alessandro Vesely <[e-mail]>]

On 30/Mar/12 20:03, Paul E. Jones wrote:
> What you describe sounds a bit like JWT:
> http://openid.net/specs/draft-jones-json-web-token-07.html
> 
> Or, it might be OpenID Connect, which uses JWT.  (What you describe is not
> in OpenID 2.0.)

Aha, thanks.  So JWT is how the claim is (supposed to be) transferred
to the RP, correct?  I'm trying to make sense of a presentation of
anonymous claims that Blaine Cook gave on last Thursday (with the
drive-in-France example).  Is it not specified or implemented, yet?

>> -----Original Message-----
>> From: Alessandro Vesely [mailto:[e-mail]]
>> 
>> I may be conflating webfinger, openid, browserid, webid, and some other
>> protocols of that sort.  At any rate, it was said that a functionality
>> relevant to some of those is to certify a generic claim, for example
>> whether someone is legally allowed to drive a lorry in France.  The user
>> would indicate the kind-of-claim (driving license) and a trusted certifier
>> (the French motoring authority) without revealing his/her identity.  The
>> relaying party would then let the user login at the certifier's site in
>> order to eventually obtain the certificate.
>> 
>> By the same logic, given that example.com should be universally trusted
>> for email addresses that end with "@example.com", its server would be able
>> to provide a certified, anonymous email address ([e-mail]) to a
>> shop, on behalf of a customer who wishes to protect his/her main address.