IETF Logo Mail Archive

Re: [Txauth] Reviewing draft-hardt-xauth-protocol-11

Francis Pouatcha <fpo@adorsys.de> Mon, 20 July 2020 18:54 UTC

Return-Path: <fpo@adorsys.de>
X-Original-To: txauth@ietfa.amsl.com
Delivered-To: txauth@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0AC7E3A0DDF for <txauth@ietfa.amsl.com>; Mon, 20 Jul 2020 11:54:09 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=adorsys.de
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I-3iKvqrphaD for <txauth@ietfa.amsl.com>; Mon, 20 Jul 2020 11:54:07 -0700 (PDT)
Received: from mail-wm1-x32c.google.com (mail-wm1-x32c.google.com [IPv6:2a00:1450:4864:20::32c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 65FDA3A0DE0 for <txauth@ietf.org>; Mon, 20 Jul 2020 11:54:07 -0700 (PDT)
Received: by mail-wm1-x32c.google.com with SMTP id q15so517942wmj.2 for <txauth@ietf.org>; Mon, 20 Jul 2020 11:54:07 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=adorsys.de; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=pq6BtKPInvvONL5Qj9cYPprcRKTBJ2eB46APU/bfsQc=; b=BysTHqc0gxasuRlHyKTMq5zZBz5tcTVfNIhIqfD8ovNAe8B/wjZLNhKynPQZjY1Jg/ uTf07hFvqZJA6ve+yqZQlHMvj1wT+r7w+xZ9avmD5dg6DP8HPi1clNpsYp5+++BBFFxh S4x7z/YYEkYIFYIqcqX6IJaz4m+a0UlW2z440=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=pq6BtKPInvvONL5Qj9cYPprcRKTBJ2eB46APU/bfsQc=; b=NmarcBjKXeMQvVTze4lo9/rQanXrhVFfJqO3vz8Tkm84fXllOAn3KacV2wnhh6naLL Ok+0R8hTKaw6f4LTj2M+rWAgunGaVi+ZkygXcCWtFIW6+o8/ppu4ACL/N+SdZ8/C68Cf tnmDb8jW/7NK1r6UTwWqZ1QdT1Q3ooCXcT7ywfU3VJuL926N6nxJ/lRFgJQqmzQNOgqf 36ulQP0heK0eRoJAYyK0FKtVh3eXKlONXu51alB83mWGh60kgKqzSfzKQyteOeEQIqoB YW6PFYKHFWswUgJ8BO34HE95oZ+zTzjgDDigfuZWMM/B4nBDYdM+Ln2SQgHrUtdO3jcg J6VQ==
X-Gm-Message-State: AOAM530vMkxLXp3BwGJwBX6q6vm+D4vgMfRg7TxU52nHn3J/XIJE0WPu 7YB5/Bgx3k1AbRVIa8YycCF6CkgcOP9e+OZAH38wXg==
X-Google-Smtp-Source: ABdhPJy2ILQFqI9bfDt4GtIy5R1uyK9wGZ7tnhxioK4fowbrV0rakGVRYf0m1AY+FAbGlO9lYYI8wqoEaA0QsIsdJbE=
X-Received: by 2002:a7b:c952:: with SMTP id i18mr658875wml.65.1595271245782; Mon, 20 Jul 2020 11:54:05 -0700 (PDT)
MIME-Version: 1.0
References: <CAOW4vyPqjcWz7njW9cVb6wejY+KaASnskefSpwMqCPs+3WPmfg@mail.gmail.com> <CAOW4vyOQYvHBBPjMSNx9=S66_JY4RVcVi2DiqL8OjXUyvzxg=w@mail.gmail.com> <CAD9ie-tou5mTnWVguNygj-D6xUdTRjqvxi-+jhC6NbDFY8ZVJQ@mail.gmail.com> <CAOW4vyM0LycEf8q1T4jF=1g8aFyeLw1b4z9emNKWOG=+4iGgzw@mail.gmail.com> <CAM8feuSWeianPu=BD0WVTv5oB+U4ZkjhtKjnAG9RFk15VqJqWA@mail.gmail.com> <CAOW4vyNTXso=tusCrzDVgM63xH4hDsx6epO6tAhh1YekbWBA0A@mail.gmail.com> <f00c75a5-f930-81a6-a50e-2eeffedac691@free.fr> <CAOW4vyOHO1We4UpCPJBKYvj22rsFd1EN6fAXw8w6YOYTUDhF=g@mail.gmail.com> <aa1381a2-5b11-f7c7-a547-cddb36732c0b@free.fr> <CAD9ie-t7ZFrODeXy=Xzvsv-6gvUY=KjW0ETf8vJYkW2p=G4boQ@mail.gmail.com> <CAOW4vyN26rnOFb+vsaxgaMzeBOsyeSUBougvjHuhQkHyYhnn2w@mail.gmail.com> <b8a83294-771f-c1d7-0956-d0a50accbbb3@free.fr> <CAD9ie-soUmghr-qxWFRhHkX3rx3qaf3wBqxkwRZ=ZfQaSoDwbw@mail.gmail.com> <df110f7d-7928-4dd2-9c09-4b169860623a@free.fr> <CAOW4vyMx21H4pBdhAkwoUAJzntFNzjT8hn=Fq=XZKVYLLdgiAA@mail.gmail.com> <8b08ff35-f1d5-ee65-c89a-c1f3191ae5b6@free.fr> <CAK2Cwb65TFqMii7BwART=Ssh6nuYJh_UJpDY_EaExQNur8Hu7w@mail.gmail.com>
In-Reply-To: <CAK2Cwb65TFqMii7BwART=Ssh6nuYJh_UJpDY_EaExQNur8Hu7w@mail.gmail.com>
From: Francis Pouatcha <fpo@adorsys.de>
Date: Mon, 20 Jul 2020 14:53:54 -0400
Message-ID: <CAOW4vyPP3H3Dtk_DK6Gmu_TOL0rjM_7kF58WOPUXj7oLETFxkA@mail.gmail.com>
To: Tom Jones <thomasclinganjones@gmail.com>
Cc: Denis <denis.ietf@free.fr>, txauth@ietf.org, Dick Hardt <dick.hardt@gmail.com>
Content-Type: multipart/alternative; boundary="000000000000ecfe3505aae4070e"
Archived-At: <https://mailarchive.ietf.org/arch/msg/txauth/xiFY3WAv1fdZwOowOU9ZrILfwoc>
Subject: Re: [Txauth] Reviewing draft-hardt-xauth-protocol-11
X-BeenThere: txauth@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: <txauth.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/txauth>, <mailto:txauth-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/txauth/>
List-Post: <mailto:txauth@ietf.org>
List-Help: <mailto:txauth-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/txauth>, <mailto:txauth-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 20 Jul 2020 18:54:09 -0000

Hello Tom,


> This interchange exhibits an essential problem of most of this work. The
> idea that humans populate the web. I have yet to see a human with an
> ethernet connection. So i must assume that the user agent is the essence of
> the human on the web.
>
No. The User agent is the agent of the User. The RO agent is the agent of
the RO. Off course the word "agent" only appears when the party (RO, User)
assuming a role needs some means of interacting with other parties.

Referring to a User agent does not conclude to the User being a human.

>
> Second there are two terms which need to be distinct in the general case -
> at least where the RO is a human and the resource contains PII.
>
What is PII?

> The RO aka subject is the identifier that is used by a real world human
> that has data on the web that is (inter alia) PII about them.
>
Next confusion: RO vs. Subject.

> The user aka guardian (and often also the subject) is the identifier that
> is used by a real world human that has acquired control of access to the
> PII about the subject.
>
Next confusion: User vs. Subject

This last sentence looks like the content of a new thread....


-- 
Francis Pouatcha
Co-Founder and Technical Lead
adorsys GmbH & Co. KG
https://adorsys-platform.de/solutions/

v2.23.0 | Report a Bug | By Email