Re: [apps-discuss] Webfinger

"Mykyta Yevstifeyev (М. Євстіфеєв)" <> Fri, 11 November 2011 17:58 UTC

Return-Path: <>
Received: from localhost (localhost []) by (Postfix) with ESMTP id 90CF721F8AF2 for <>; Fri, 11 Nov 2011 09:58:21 -0800 (PST)
X-Virus-Scanned: amavisd-new at
X-Spam-Flag: NO
X-Spam-Score: -3.34
X-Spam-Status: No, score=-3.34 tagged_above=-999 required=5 tests=[AWL=-0.042, BAYES_00=-2.599, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_LOW=-1]
Received: from ([]) by localhost ( []) (amavisd-new, port 10024) with ESMTP id Ed9+tam1g5Co for <>; Fri, 11 Nov 2011 09:58:20 -0800 (PST)
Received: from ( []) by (Postfix) with ESMTP id 5B02A21F8AE1 for <>; Fri, 11 Nov 2011 09:58:20 -0800 (PST)
Received: by bkbzv15 with SMTP id zv15so4296445bkb.31 for <>; Fri, 11 Nov 2011 09:58:18 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;; s=gamma; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type; bh=PwwpOIogzYUlpA/RwT2DgOyXdPWeYeR9SZ/YRT+AIDY=; b=Czm8bbgcDdcONY+CGoIVck4TbLictt3NsZfB2hSUw5joZ1LCufYEw6GT59hj+RXEbg q8/DPUCWDbOplqy1rIgENRf6j0e3356kOAN+1oXCLCrjq384esJmXrct/cooYIR0qAkH HAOffL4bQ3Q3+c+lk3VO2fni4enpv2myHPjJI=
Received: by with SMTP id af14mr9177934bkc.69.1321034298030; Fri, 11 Nov 2011 09:58:18 -0800 (PST)
Received: from [] ([]) by with ESMTPS id by2sm2244483bkb.15.2011. (version=SSLv3 cipher=OTHER); Fri, 11 Nov 2011 09:58:16 -0800 (PST)
Message-ID: <>
Date: Fri, 11 Nov 2011 19:59:02 +0200
From: "\"Mykyta Yevstifeyev (М. Євстіфеєв )\"" <>
User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:7.0.1) Gecko/20110929 Thunderbird/7.0.1
MIME-Version: 1.0
References: <032101cc9288$e3a06910$aae13b30$>
In-Reply-To: <032101cc9288$e3a06910$aae13b30$>
Content-Type: multipart/alternative; boundary="------------020706060006040502090104"
Subject: Re: [apps-discuss] Webfinger
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: General discussion of application-layer protocols <>
List-Unsubscribe: <>, <>
List-Archive: <>
List-Post: <>
List-Help: <>
List-Subscribe: <>, <>
X-List-Received-Date: Fri, 11 Nov 2011 17:58:21 -0000

Hi Paul and all,

I think you contributed a very interesting proposal indeed.  Really, RFC 
1288 finger protocol is now outdated, and you're right claiming that it 
provides no means of automatic processing.  BTW, RFC 1288 is currently 
at Draft Standard maturity level, which has been abandoned by RFC 6410, 
and we should therefore undertake something with this respect, as should 
we with respect of other Apps-related DSs, but that is what is to be 
discussed separately.

With respect to proposed 'acct' URI scheme:  how are you going to handle 
internationalization (i18n)?  We have RFC 5335 defining <utf8-addr-spec> 
(Experimental RFC) and IESG has already approved EAI 5335bis, that will 
be Standards Track.  So will <utf8-addr-spec> be allowed in 'acct' URIs 
in some way?

Webfinger implies use of some link relations.  Is it anticipated that 
URIs will be used as link relations types, or we'll need to define link 
relation types for all possible use-cases of Webfinger?

Your Section 4 seems to be somewhat narrative.  I propose to divide it 
into normative specification and examples.

With regard to CORS - I'm not actually acquainted with this technology, 
but I see it is currently documented as W3C working draft, so I don't 
suspect it is now widely-used (I may of course be wrong, so please feel 
free to correct me), and I think there is no use putting MUST 
requirement on its use in Webfinger.  You could better remove your 
section on CORS from the document at all.

I think we should also provide some means of mentioning Webfinger 
accounts in vCards.  You could please see VCARDDAV document which 
Webfinger elements may also be incorporated.

In Abstract, you should be more specific about what your document 
defines.  I propose mentioning directly that the document is the 
specification of Webfinger protocol, not "procedures for dicovering 
information about people".

In Section 7 you should clearly state that Webfinger (so as finger 
itself) is intentionally left w/o any means of controlling access to 
information (unless we want to produce *such* protocol).

I see the document is on APPSAWG agenda on the meeting, so I anticipate 
it will soon become APPSAWG item doc.  I won't be on meeting, but if you 
discuss the adaptation of Webfinger draft please also take into account 
I'm in favor of such adaptation (consider this as my 2p).

Mykyta Yevstifeyev

24.10.2011 23:09, Paul E. Jones wrote:
> Folks,
> We just submitted this:
> The tools for Webfinger are now defined, but the procedures need to be 
> clearer with respect to what most of us understand as “webfinger”.  
> This is just a first stab at making that happen and we hope to 
> progress this to publish an RFC in the application area.
> We welcome any comments you have on the topic, either privately or 
> publicly.
> Paul
> _______________________________________________
> apps-discuss mailing list