Re: [mmox] OGP scalability concerns

Jason Giglio wrote:
> My suggestion is that it's not appropriate to talk about client
> identity, trust, or authentication as a service to be provided in a
> centralized manner.
>
>   

Let's look at the text-based, non-interactive web:

OpenID is a service, and it is "centralized" in the sense that an OpenID 
provider is a central service provider.
E-mail is a service, and it is "centralized" in the sense that an e-mail 
address is centralized to that provider.
When I sign up for a web site, typically I enter an e-mail address and a 
password, and I then have to click on a link sent to that e-mail 
address. This verifies that I am at least marginally reachable through 
that e-mail address. This establishes identity, albeit tenuous.
However, if I want to show at amazon.com, I have to provide another 
identity: my credit card number. This is an identity with significantly 
higher bar to accreditation.
Some sites, like those where there is legal ramifications to providing 
service to under-age visitors, actually use the credit card identity 
even for site access, because they have higher requirements on the 
identity they interact with.

What, if anything, in this model do you think would be different for 
virtual worlds, when it is real-time 3D based?

Sincerely,

jw

> The rest of the Internet gets along just fine without it.  Sure I can
> get a CA to sign something that says I am who I am, but no one much
> cares; the rest of the net has routed around the problem of client
> identification. I'm not sure why we would need to tackle something so
> fundamentally difficult here, when it's not really necessary.
>
> -Jason
>   
> ------------------------------------------------------------------------
>
> _______________________________________________
> mmox mailing list
> mmox@ietf.org
> https://www.ietf.org/mailman/listinfo/mmox
>   