[apps-discuss] R: Webfinger

[Goix Laurent Walter <[e-mail]>]

+1 for this. There may not be the need for HTTPS all the time. Some security could be provided using XRD signature, which may be considered enough by some implementations.

Also I do not see why JRD need be mandated instead of XRD, which existed long before and is already used and referenced by several specs, which may not be aware/akeen to also support json.
I guess it also relates to which entity will use webfinger. My understand is that nowadays a webfinger client is implemented by a network resource for federation purposes more than within some javascript code. I can understand future usages for a direct javascript invocation but wouldn’t limit to it, to keep consistency with XRD.

walter

Da: [e-mail] [mailto:[e-mail]] Per conto di "Mykyta Yevstifeyev (?. ?????????)"
Inviato: domenica 20 novembre 2011 6.06
A: [e-mail]
Oggetto: Re: [apps-discuss] Webfinger

19.11.2011 17:03, Eran Hammer-Lahav wrote:

Are there reasons not to mandate HTTPS?

I don't think the document should put MUST on using HTTPS.  RFC 6415 specified that host-meta document can be located using both HTTP and HTTPS, and I don't see a reason to constrain this in Webfinger.  Maybe the spec. should repeat that both HTTP and secured variants may be used.

Mykyta Yevstifeyev
Questo messaggio e i suoi allegati sono indirizzati esclusivamente alle persone indicate. La diffusione, copia o qualsiasi altra azione derivante dalla conoscenza di queste informazioni sono rigorosamente vietate. Qualora abbiate ricevuto questo documento per errore siete cortesemente pregati di darne immediata comunicazione al mittente e di provvedere alla sua distruzione, Grazie.

This e-mail and any attachments is confidential and may contain privileged information intended for the addressee(s) only. Dissemination, copying, printing or use by anybody else is unauthorised. If you are not the intended recipient, please delete this message and any attachments and advise the sender by return e-mail, Thanks.

[cid:[e-mail]]Rispetta l'ambiente. Non stampare questa mail se non è necessario.