Re: [Dime] Dime WG at IETF 113 / Vienna ??

[Alan DeKok <[e-mail]>]

On Mar 11, 2022, at 2:28 AM, Rick van Rein <[e-mail]> wrote:
> Ah, the term was used informally.  I am talking of a name without
> domain, like "fred".  I will clarify this in the text:

  OK.  If the identity	doesn't have a realm, then it can't be routed.

>   However, the NAI can be just utf8-username whereas BYOID always
>   needs to express the domain, so the root of the grammar tree is
>   different:

  Sure.  It may be sufficient to just say "don't do that".  RFC 7542 allows NAIs without realms for historical purposes. But makes it clear that if there's any AAA routing, the realm has to exist.

> Every site that says "login with your Google / Facebook account"
> shows that it is tempting to use an identity provider to avoid
> local accounts.  We'd rather facilitate things from a domain
> under our own control than to delegate decisions on account access
> to such data-hungry parties.

  While I agree, I've been fighting this battle for a long time.  I've moved on to other work.

>>  This is not correct.  The utf8-realm is case sensitive,
> 
> Autch, really?

  Sorry, typo. The utf8-realm is a domain name, which is case INsensitive.   Please ignore the typo.

  Alan DeKok.