Re: [ogpx] Protocol for permitting policy decisions

[David W Levine <[e-mail]>]

Well, I'd again (like the sadly broken record I'm becoming on this topic) 
say its a service or set of services which denies the access, but quite. A 
deployer is free to apply any policy they chose to a service request. If 
they only want people who have visited Candy Mountain, Surrendered a 
Kidney, and can prove it in the form of the ability to respond to provide 
a special token from the magical unicorn powered talisman they get from 
the Leoplueridon to access a given service, so be it. The protocol need 
merely allow them to insert:
<map>
<key>unicorn_talisman_token</key>
<string>shun the unbeliever</string>
</map> 

in an expected spot, and they can reject people who can't provide the 
correct response.

- David
~ Zha






Infinity Linden <[e-mail]> 
10/05/2009 07:38 PM

To
David W Levine/Watson/IBM@IBMUS
cc
Magnus Zeisig <[e-mail]>se>, "[e-mail]" <[e-mail]>rg>, 
[e-mail]
Subject
Re: [ogpx] Protocol for permitting policy decisions






On Mon, Oct 5, 2009 at 1:33 PM, David W Levine <[e-mail]> wrote:

"In order to have rights beyond "guest" on this region, you, or your agent 
domain, on your behalf, needs to have signed the TOS document. I will 
demand a digitally signed proof of this, as metadata when you 
request acess to my region." 

- David 
~ Zha 


i think i grok what you're trying to say here, but i would also add... "a 
given agent domain MAY choose to deny you ANY service (including anonymous 
or guest access) if you don't provide some form of authenticator and 
assert that you have read and understand the domains terms of use."

-cheers
-meadhbh