W3C home > Mailing lists > Public > public-xg-webid@w3.org > April 2011

RE: RE: Authentication workflow draft.

From: peter williams <home_pw@msn.com>
Date: Tue, 12 Apr 2011 11:55:09 -0700
Message-ID: <SNT143-ds115E683546155810162EF792AB0@phx.gbl>
To: "'Akbar Hossain'" <mail@akbarhossain.com>
CC: "'WebID XG'" <public-xg-webid@w3.org>

Ideally, the web service would be a ws-trust STS! Then formally, I'm asking
someone to translate a cert token into a status token.


But, there im pushing my luck way too far. A simple POST of a request body
of MIME type application/x-509-user-cert over https, that returns text/plain
of YES/NO is fine. If folks object to POST (given the formal meaning of POST
in REST semantics), it can be a GET with a large request header. instead.


But, I don't see why its not POST. Formally, I posting a document, asking
for an id. Formally, YES is the id response. If one wants to say that YES is
implied by any URI (vs none), I don't mind. REST as taught to me in .NET 3.5
is a pattern, not a formal religion to be measured against.

Did I recall my POST semantics right? (its been a year since I studied that
set of doctrines about GET/POST, etc)


From: akkiehossain@gmail.com [mailto:akkiehossain@gmail.com] On Behalf Of
Akbar Hossain
Sent: Tuesday, April 12, 2011 11:04 AM
To: peter williams
Cc: WebID XG; Andrei Sambra; Kingsley Idehen
Subject: Re: RE: Authentication workflow draft.


Perhaps a small variant of the delegated service as per foafssl.org 

On 12 Apr 2011 18:03, "peter williams" <home_pw@msn.com> wrote:
> Yes, it's time for a restful web service (supported by https client authn
and SSL session management) that takes a base64 encode cert as input, and
returns YES/NO 
> The input parser should assume the worst: strange CRLF or LR or CR, random
header text, variable number of dashes, missing final EOL, UTF header bytes,
web friendly char sets or ascii - so as to deal with the realty of "PEM
> Another variant would take a cert sha1 fingerprint, rather than the cert.
> -----Original Message-----
> From: public-xg-webid-request@w3.org
[mailto:public-xg-webid-request@w3.org] On Behalf Of Kingsley Idehen
> Sent: Tuesday, April 12, 2011 9:29 AM
> To: peter williams
> Cc: 'Andrei Sambra'; 'WebID XG'
> Subject: Re: Authentication workflow draft.
> On 4/12/11 12:14 PM, peter williams wrote:
>> This is relevant to me, as it means for each URI in the SAN, I do a
uriburner query, which (remotely) looks for a cert:identity match for 1 card
at a time.
>> Can sparql have multiple FROM lines? Perhaps?
> Yes, re. Virtuoso's SPARQL support.
>> Can the query be modified so Id know which URI matched, if one could
specify multiple matches?
> Yes.
> I am guessing its time for a WebID verification service. Ditto email
verification service as spec'd by Toby a while back.
> -- 
> Regards,
> Kingsley Idehen 
> President& CEO
> OpenLink Software
> Web: http://www.openlinksw.com
> Weblog: http://www.openlinksw.com/blog/~kidehen
> Twitter/Identi.ca: kidehen
Received on Tuesday, 12 April 2011 18:55:41 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 19:39:44 UTC