Re: Position Paper for W3C Workshop on Identity

So one feedback I have had shows that we need to tune a little bit the understanding of how 
the user can control not just his name but the attributes about him. 

This is in fact another improvement of WebID to X509, and an important one that explains 
why we can go so much further. In usual usage of X509 certs all the information
passed around was in the cert. True it was designed to be a pointer to an X500 DB, which would
contain the further information (and which could still work that way of course).

Instead we use Web Based Access control and Hypermedia as the Engine of Application State [1]. Perhaps that 
is something we can get in there. We can have the profile link to or return more or less depending on the 
identity of the requestor.

I think that can be tied into the assurance story too.

I'll try to work that story in.

	Henry

[1] I found this article on the subject but have not yet read it carefully
http://www.peej.co.uk/articles/hypermedia-as-the-engine-of-application-state.html


On 22 Apr 2011, at 12:42, Henry Story wrote:

> From yesterdays comments I have now tweaked the paper to the following
> 
>  http://bblfish.net/tmp/2011/04/22/
> 
> I think we really are there, it reads very well now, is clear, open to new protocols (ldap included),
> makes friends in the TLS, dane, openid and freedom box community, whilst also showing
> the government how they can get some of what they want for little cost (important
> in the government cut back season, when Democratic presidents have to work with Republicans).
> 
> I'll  start passing this to members of this group who are not participating
> here so actively, probably due to combined reason of volume of mail  and
> holiday season, to see if we can get some other feedback, some other points of
> views. 
> 
> We can review some of this on Monday.
> 
> Henry
> 
> 

Social Web Architect
http://bblfish.net/