[Opensim-dev] Trust & distributed grids

[Infinity Linden (Meadhbh Hamrick)]

heya.

just as a FYI, we're going to be working through the whole trust
management issue as part of VWRAP. there was some informal discussion
about using X.509 on the ogpx list running up to a general agreement
we should try to agree on the problem domain before pushing any one
particular technology.

so... based on informal discussions about trust management on a VWRAP
open grid seem to be tending towards OAuth and PKI. there is some
heartburn about including OpenID directly into the specifications, but
i understand that jhurliman is working on some OpenID tools to work
with cable beach. and tao (aka christian) is working with xmlgrrrl on
ProtectServ, which should be VERY interesting at some point.

so from a standards perspective, there's a lot of cool stuff on the
horizon and some more conventional stuff that'll probably get
specified a little sooner.

-cheers
-meadhbh hamrick ( aka infinity linden aka meadhbh oh )

--
   infinity linden (aka meadhbh hamrick)  *  it's pronounced "maeve"
         http://wiki.secondlife.com/wiki/User:Infinity_Linden



On Tue, Nov 24, 2009 at 06:14, Robert A. Knop Jr. <rknop at pobox.com> wrote:
> I don't know that this really *is* offtopic, unless it's already a
> settled issue amongs the OpenSim devs.
>
> On Tue, Nov 24, 2009 at 02:19:20PM +0100, Impalah Shenzhou wrote:
>> I could trust in you, but you need to tell me "you are really you" with a
>> local login (i.e. email headers can be altered to impersonate as another
>> person) or someone I trust should tell it to me (i.e. OpenID).
>
> Do you have any personal web pages anywhere?  Do you run any CGI or any
> PHP there?  Do you identify everybody who comes there?  That's the
> analogy we should think about.  Yes, we need a secure infrastructure so
> that only the small number of people you *really* trust can do scary
> things.  But at the level of running regions -- well, you may be using a
> hosting provider, or you may be hosting yourself, but you don't need
> full and complete trust that everybody is who they claim to be just to
> connect to the world.
>
> --
> --Rob Knop
>  E-mail:    rknop at pobox.com
>  Home Page: http://www.pobox.com/~rknop/
>  Blog:      http://www.sonic.net/~rknop/blog/
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.9 (GNU/Linux)
>
> iD8DBQFLC+pcfEn1oMJSrdsRApVqAKCGz8o5gt7vEqvl3HJK07jftpLi5wCg56g+
> oq1mcfGvljoH5K0Y6X/WX9M=
> =bh/M
> -----END PGP SIGNATURE-----
>
> _______________________________________________
> Opensim-dev mailing list
> Opensim-dev at lists.berlios.de
> https://lists.berlios.de/mailman/listinfo/opensim-dev
>
>