[vwrap] Why are we standardizing the login handshake? (was RE: one question)

["Hurliman, John" <[e-mail]>]

> ...
> 
> Great. Now can you please explain to me why this matters for interop:
> http://tools.ietf.org/html/draft-ietf-vwrap-authentication-00
> Not just the title, but the actual content of that draft.
> 

That's the concise example of what doesn't fit that I was looking for, thank you. Honestly, I have no idea how we are furthering interop by standardizing the login process. Maybe it fits in as an authentication step? But--and I'm going to keep using the OpenID analogy here because I think there are a lot of similarities to draw on--OpenID describes its own authentication step as "and then some fill in the blank happens here". They purposely leave it out of scope and only standardize on how you prove ownership of an identity across trust domains, the server-to-server endpoints. That makes more sense to me than saying "and then you send a SHA-256 hash of your password to authenticate, and maybe wait for a maintenance daemon to do some processing, and...". Meadhbh, can you comment on this?

John