<div>John,</div>
<div> </div>
<div>I apologize. I didn't realize that OSgrid.org and <a href="http://uic.edu">uic.edu</a> were both already running OpenID identity servers. I believe Crista misunderstood what I was saying (I admit my words were a bit unclear).</div>
<div> </div>
<div>This is what I said:</div>
<div> </div>
<div><strong><em>> This way various grids could all run "openID" servers, and trust<br>>agreements would need to be established between the various grids.<br></em></strong></div>
<div>Let me clarify this further, and this is what I meant to say:</div>
<div> </div>
<div>This way various grids could each run their own OpenID Identity servers, and an OpenID Identity would/could be used to establish the "interoperable" trust agreement (the established identity) between a community of users and the various grids.</div>
<div> </div>
<div><strong><em>>I'm not going to act on anything that suggests "trust agreements between<br>>various grids." </em></strong></div>
<div> </div>
<div>I was referring to an interoperable "OpenID" Identity (as the cross-grid identity). I apologize for using the word "trust" or not being clearer.</div>
<div> </div>
<div><strong><em>> Thank you for letting me be the example. I find this exchange very stimulating. </em></strong></div>
<div> </div>
<div>Charles, soon people will be asking for autographs. ;-)</div>
<div> </div>
<div> </div>
<div> Mark</div>
<div><br> </div>
<div class="gmail_quote">On Mon, Feb 23, 2009 at 7:12 PM, Hurliman, John <span dir="ltr"><<a href="mailto:john.hurliman@intel.com">john.hurliman@intel.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">
<div class="Ih2E3d">>-----Original Message-----<br>>From: <a href="mailto:opensim-dev-bounces@lists.berlios.de">opensim-dev-bounces@lists.berlios.de</a> [mailto:<a href="mailto:opensim-dev-">opensim-dev-</a><br></div>
<div class="Ih2E3d">><a href="mailto:bounces@lists.berlios.de">bounces@lists.berlios.de</a>] On Behalf Of Diva Canto<br>>Sent: Monday, February 23, 2009 5:06 PM<br>>To: <a href="mailto:opensim-dev@lists.berlios.de">opensim-dev@lists.berlios.de</a><br>
</div>
<div class="Ih2E3d">>Subject: Re: [Opensim-dev] User Authentication<br>><br>>Mark Malewski wrote:<br>><br>> Just to clarify...<br>><br>> > Grids could provide openIDs in the form of<br>
>"<a href="http://openid.osgrid.org/users/screenname" target="_blank">openid.osgrid.org/users/screenname</a><br></div>><<a href="http://openid.osgrid.net/screenname" target="_blank">http://openid.osgrid.net/screenname</a>> "<br>
<div>
<div></div>
<div class="Wj3C7c">><br>> With all grids being independent of one another, or in the example<br>>given by John, maybe use an "<a href="http://openid.osgrid.org/users/screenname" target="_blank">openid.osgrid.org/users/screenname</a>"<br>
><br>> <a href="http://openid.osgrid.org/users/Charles_Krinke" target="_blank">http://openid.osgrid.org/users/Charles_Krinke</a><br>><br>><br>>For those of you who don't know, this already exists. Click this:<br>
><a href="http://osgrid.org:8002/users/charles_krinke" target="_blank">http://osgrid.org:8002/users/charles_krinke</a><br>>or this:<br>><a href="http://ucigrid00.nacs.uci.edu:8002/users/crista_lopes" target="_blank">http://ucigrid00.nacs.uci.edu:8002/users/crista_lopes</a><br>
><br>><br>><br>> Again, in this example Charles happens to have his identity at<br>>OSGrid, but that's not a requirement of the exchange. It could just as<br>>easily been an identity from another grid.<br>
><br>> This way various grids could all run "openID" servers, and trust<br>>agreements would need to be established between the various grids.<br>><br>>I'm not going to act on anything that suggests "trust agreements between<br>
>various grids." That's an AWG concept that I very much disagree with,<br>>and want no part in. I have no problem with companies cutting corners on<br>>security in order to be able to exchange agents on a lawyer-backed up<br>
>trust basis. But that's not what I'm doing here, and that's not what a<br>>lot of people want OpenSim to be.<br>><br>>The goal is to be able to go from my home standalone to *any* sim out<br>>there that I know nothing about, and still be sure that nothing bad will<br>
>happen to my belongings. Anything less than this is not acceptable as a<br>>goal, for me.<br>><br>>Crista<br>><br><br></div></div>Mark, could you elaborate on what you meant here? As long as the default setup of a grid allows foreign visitors, I don't think any explicit trust mapping needs to happen. As Diva said, this kind of explicit mapping was the goal of the AWG and is now the goal of the MMOX group, which doesn't get us any closer to secure interoperability. A crucial part of any solution is going to be making sure there is a good default setting that enables Hypergrid-like behavior.<br>
<font color="#888888"><br>John<br></font>
<div>
<div></div>
<div class="Wj3C7c">_______________________________________________<br>Opensim-dev mailing list<br><a href="mailto:Opensim-dev@lists.berlios.de">Opensim-dev@lists.berlios.de</a><br><a href="https://lists.berlios.de/mailman/listinfo/opensim-dev" target="_blank">https://lists.berlios.de/mailman/listinfo/opensim-dev</a><br>
</div></div></blockquote></div><br>