Re: [vwrap] Removing first name / last name assumptions?

Meadhbh Hamrick <ohmeadhbh@gmail.com> Mon, 05 April 2010 20:32 UTC

Return-Path: <ohmeadhbh@gmail.com>
X-Original-To: vwrap@core3.amsl.com
Delivered-To: vwrap@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 706F43A6A97 for <vwrap@core3.amsl.com>; Mon, 5 Apr 2010 13:32:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.166
X-Spam-Level:
X-Spam-Status: No, score=-2.166 tagged_above=-999 required=5 tests=[AWL=0.433, BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id d7TOLzs1DWV8 for <vwrap@core3.amsl.com>; Mon, 5 Apr 2010 13:32:33 -0700 (PDT)
Received: from mail-qy0-f181.google.com (mail-qy0-f181.google.com [209.85.221.181]) by core3.amsl.com (Postfix) with ESMTP id 405EC28C1D1 for <vwrap@ietf.org>; Mon, 5 Apr 2010 13:29:36 -0700 (PDT)
Received: by qyk11 with SMTP id 11so4336989qyk.13 for <vwrap@ietf.org>; Mon, 05 Apr 2010 13:29:29 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :from:date:received:message-id:subject:to:cc:content-type :content-transfer-encoding; bh=dbMI0r9funtC1F7SVL/pYaieQgKeT9t1Mu9NuLgmay0=; b=jCcw6OnZ5Iah2i7qPUmJz73pNx2ccvhl+B+UVPtb80vbLLK3AYy65a3PyH2XJ/QFQd 3WMEjImdMAPlz/cXugXUXG0RcXGax6xT5+fVIALn8kV5heMf8Le7QDc++X/zPL4qAyR7 XI0YBuovIXzmuwiKwhACOkdgRSXab1av8/39M=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type:content-transfer-encoding; b=TSAPXGKTQp8g8Xm6mCC0rVaqBj7kcSjvKesEmdBwOAjFfFrv57BS0Hc2K1WQ3n2Tnq YG4YOKrxdIQrmJVSK3E/89+77uEfEJmAtsRewxunXTkKcAF2bimsOCJZm8Mj73JP9xwl kFXMb6ZwcU4xDHnC7ewI3ds2GTnzB/XDFUnKA=
MIME-Version: 1.0
Received: by 10.229.247.72 with HTTP; Mon, 5 Apr 2010 13:29:09 -0700 (PDT)
In-Reply-To: <62BFE5680C037E4DA0B0A08946C0933DCB738CC5@rrsmsx506.amr.corp.intel.com>
References: <62BFE5680C037E4DA0B0A08946C0933DCB738C13@rrsmsx506.amr.corp.intel.com> <t2jb325928b1004051220i5f1d8f04od2602f26f758f3da@mail.gmail.com> <CDB96FF3-A282-40B3-94D8-A9B6A00D8AF5@bbn.com> <x2qb325928b1004051246pac527c9bj8084672f796ec34c@mail.gmail.com> <32F75F62-9787-4453-B0FE-561B312336E2@bbn.com> <62BFE5680C037E4DA0B0A08946C0933DCB738CC5@rrsmsx506.amr.corp.intel.com>
From: Meadhbh Hamrick <ohmeadhbh@gmail.com>
Date: Mon, 5 Apr 2010 13:29:09 -0700
Received: by 10.229.91.11 with SMTP id k11mr8414867qcm.50.1270499369196; Mon, 05 Apr 2010 13:29:29 -0700 (PDT)
Message-ID: <x2sb325928b1004051329se938e7b6hec8412f696b02164@mail.gmail.com>
To: "Hurliman, John" <john.hurliman@intel.com>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Cc: "vwrap@ietf.org" <vwrap@ietf.org>
Subject: Re: [vwrap] Removing first name / last name assumptions?
X-BeenThere: vwrap@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Virtual World Region Agent Protocol - IETF working group <vwrap.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/vwrap>, <mailto:vwrap-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/vwrap>
List-Post: <mailto:vwrap@ietf.org>
List-Help: <mailto:vwrap-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/vwrap>, <mailto:vwrap-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 05 Apr 2010 20:32:34 -0000

the length thing is a good point.

if we asked LL about it, i would suspect the answer we would get back
would be: "there's no reason for that to be in the protocol, we can
simply provide an error if someone gives an invalid name."

in other words, what is the use of checking if the first name and last
name strings are greater than 32 characters if there's no way for a
valid name to have more than 32 chars in each?

--
meadhbh hamrick * it's pronounced "maeve"
@OhMeadhbh * http://meadhbh.org/ * OhMeadhbh@gmail.com



On Mon, Apr 5, 2010 at 1:11 PM, Hurliman, John <john.hurliman@intel.com> wrote:
> That sounds like a fine approach, but retrofitting the UI to pick a new avatar name into the existing protocol and codebase is tricky. Right now I just do a best attempt at parsing the first/last name. It looks for the first " " character to split on; if that's not found it uses the whole string as a first name along with a default last name (Guest, I think). Then it trims the first and last name to the maximum allowable length and removes any illegal characters.
>
> If you really want to make this support the SL use case, change the draft to restrict "first" and "last" to a maximum of 32 characters and only allow alphanumeric ASCII characters.
>
> John
>
>> -----Original Message-----
>> From: Richard Barnes [mailto:rbarnes@bbn.com]
>> Sent: Monday, April 05, 2010 1:00 PM
>> To: Meadhbh Hamrick
>> Cc: Hurliman, John; vwrap@ietf.org
>> Subject: Re: [vwrap] Removing first name / last name assumptions?
>>
>> I'm still trying to understand the use case you're trying to support.
>> Here's another guess:
>>
>> 1. I have an agent/account with vwrap.example.com, which has assigned
>> me the identifier "foobar123@vwrap.example.com" and allows me to set
>> whatever display name I want; I pick "f00b@r" (no "firstname lastname")
>>
>> 2. I want to take the agent with this identifier into SL, i.e.,
>> authenticate to SL using that identifer.
>>
>> 3. SL requires all agents to be identified / authenticated with
>> "Firstname Lastname"
>>
>> Am I understanding the problem correctly?
>>
>> If so, it seems like you could treat the "Firstname Lastname" as a
>> mapped identifier, with the VWRAP interface to SL (since that will
>> have to be new code anyway) providing the translation.
>> 1. When an unknown ID shows up, ask them to pick a new SL name (in UI)
>> 2. VWRAP layer stores binding between VWRAP ID and SL name for repeat
>> logins
>> 3. VWRAP layer authenticates client to SL as SL name
>>
>> --Richard
>>
>>
>>
>> On Apr 5, 2010, at 3:46 PM, Meadhbh Hamrick wrote:
>>
>> > yes. you can have those with a single opaque identifier. the problem
>> > is that the large exemplar of the legacy use case does not support
>> > those identifiers at the moment, and it's unknown when it will in the
>> > future.
>> >
>> > you COULD simply say that the identifier is:
>> >
>> > first_name "dot" last_name
>> >
>> > but then what do you do with names with dots in them? change them in
>> > the system? use a blank? what about the names with blanks in them.
>> >
>> > i think it's an INSANELY GREAT idea to define an entity identifier
>> for
>> > agents and account holders, but at the moment and in the near term,
>> > there is a requirement that we carry information in a way in which
>> the
>> > first name and last name are separate items in the transfer syntax.
>> >
>> > again. there is NO REQUIREMENT that new systems support the
>> first_name
>> > / last_name semantics, but there is a requirement that it be
>> > representable in the protocol to support legacy systems.
>> >
>> > -cheers
>> > -meadhbh
>> > --
>> > meadhbh hamrick * it's pronounced "maeve"
>> > @OhMeadhbh * http://meadhbh.org/ * OhMeadhbh@gmail.com
>> >
>> >
>> >
>> > On Mon, Apr 5, 2010 at 12:38 PM, Richard Barnes <rbarnes@bbn.com>
>> > wrote:
>> >> Maybe I'm missing something here, but if you just had an opaque
>> >> "client
>> >> identifier" field where you could put an arbitrary name chosen by
>> the
>> >> provider, surely, then couldn't you just shove something like
>> >> "Firstname
>> >> Lastname" into that field?
>> >>
>> >> Also, wasn't there also some discussion in the meeting of
>> >> separating display
>> >> names from identifiers (as is common in IM and email systems)?
>> >> That way you
>> >> could have "Infinity Linden <infinity@example.com>"m>".
>> >>
>> >> The only reason you would need to have a (Firstname, Lastname) pair
>> >> in the
>> >> *protocol* is if you expected a need for names to be used in that
>> way
>> >> interoperably.  For example, my avatar walks into a new region
>> >> operated by a
>> >> party I've never met before, and the new region greets me by first
>> >> name.  Is
>> >> that what you're thinking?
>> >>
>> >> (Even then, you could address with parsing, if this were not
>> >> regarded as a
>> >> critical use case.  See Gmail's "first name extraction" in Inbox
>> >> message
>> >> summaries.)
>> >>
>> >> --Richard
>> >>
>> >>
>> >> On Apr 5, 2010, at 3:20 PM, Meadhbh Hamrick wrote:
>> >>
>> >>> i thought it did for a little bit
>> >>>
>> >>> basically here's the rub.
>> >>>
>> >>> sure, we can remove this bit of SL legacy from the protocol, but
>> >>> linden is unlikely to drop support for it from SL. so if it's
>> >>> removed
>> >>> from the protocol, then the first name / last name option for
>> >>> authentication (which is currently used by both SL and OpenSim)
>> will
>> >>> need to be described in a proprietary extension to the auth spec.
>> >>>
>> >>> is this really what we want?
>> >>>
>> >>> do we really want to make it HARDER to access existing services
>> >>> run by
>> >>> organizations and individuals who are interested in making VWRAP a
>> >>> success?
>> >>>
>> >>> i still don't understand why keeping first name / last name as an
>> >>> OPTION is a problem for people. as far as i can tell, the people
>> who
>> >>> prefer this course of action are morgaine and carlo, neither of
>> >>> which
>> >>> has indicated they will be implementing this specification.
>> >>>
>> >>> calling for the removal of other people's use cases is a bit rude.
>> >>> while this is not an effort to "bless" linden's Second Life model
>> >>> and
>> >>> legacy protocol, it is also not an effort to bury it.
>> >>>
>> >>> the current draft allows for EITHER an account identifier or an
>> >>> agent
>> >>> identifier to be used to identify a user for the purpose of
>> >>> authentication. if you want to use a single opaque identifier, use
>> >>> the
>> >>> account identifier. if you want to use a first name / last name,
>> use
>> >>> the agent identifier. there is no requirement that an
>> authentication
>> >>> service support both. the requirement is, that if you support the
>> >>> agent identifier, you use the map defined in the draft.
>> >>>
>> >>> as it stands now, the account identifier was intended to be used in
>> >>> conjunction with agent identifiers in case a user had multiple
>> >>> avatars
>> >>> attached to a single "account." maybe we could change it to this:
>> >>>
>> >>>  ; agent identifier
>> >>>
>> >>>  &agent_identifier = {
>> >>>   name: [ string, ... ]
>> >>>  }
>> >>>
>> >>>  ; account identifier
>> >>>
>> >>>  &account_identifier = {
>> >>>   type : 'account',
>> >>>   agents: [ &agent_identifier, ... ],
>> >>>  }
>> >>>
>> >>> in this proposal, the data used to identify the user is an array.
>> >>> for
>> >>> systems like second life and OpenSim that want to use two names to
>> >>> identify users' agents can. systems that want to use a single
>> >>> account
>> >>> name (like an email address) can.
>> >>>
>> >>> the account identifier goes back to what it was supposed to be: a
>> >>> way
>> >>> for a user with multiple avatars to login with an account
>> >>> credential,
>> >>> giving a list of agent identifiers the authentication service
>> should
>> >>> explicitly check for maintenance.
>> >>>
>> >>> so, to recap:
>> >>>
>> >>> a. please don't dis my use case.
>> >>> b. account identifiers actually serve a purpose other than just
>> >>> identifying an account, they communicate the client's interest int
>> >>> he
>> >>> maintenance state of the agents associated with the account.
>> >>> c. sure, i'm hip to dropping the last name / first name thing, but
>> >>> only if we can do something that supports our use case. (like
>> >>> doing a
>> >>> name array)
>> >>> d. servers shouldn't be REQUIRED to implement two string
>> >>> identifiers,
>> >>> but that being said, there are services that use them and it's
>> >>> probably a very good idea for clients to support this use case.
>> >>>
>> >>> -cheers
>> >>> -meadhbh
>> >>>
>> >>> --
>> >>> meadhbh hamrick * it's pronounced "maeve"
>> >>> @OhMeadhbh * http://meadhbh.org/ * OhMeadhbh@gmail.com
>> >>>
>> >>>
>> >>>
>> >>> On Mon, Apr 5, 2010 at 11:39 AM, Hurliman, John
>> <john.hurliman@intel.com
>> >>> >
>> >>> wrote:
>> >>>>
>> >>>> At the IETF77 meeting there was talk about removing the first
>> >>>> name / last
>> >>>> name assumptions from the avatar identifier, but it looks like
>> that
>> >>>> conversation didn't carry over to the mailing list. Does anyone
>> >>>> know exactly
>> >>>> which I-Ds (and which sections) reference avatar identifiers as
>> >>>> first_name+last_name?
>> >>>>
>> >>>> John
>> >>>> _______________________________________________
>> >>>> vwrap mailing list
>> >>>> vwrap@ietf.org
>> >>>> https://www.ietf.org/mailman/listinfo/vwrap
>> >>>>
>> >>> _______________________________________________
>> >>> vwrap mailing list
>> >>> vwrap@ietf.org
>> >>> https://www.ietf.org/mailman/listinfo/vwrap
>> >>
>> >>
>
>