<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
With all due respect to you and the people who find the problem of
bounded interoperability interesting, that is not the problem I'm
trying to solve. We have different goals. So, find a solution for your
problem (not difficult, in my view, and it looks like you already found
it), and those of us who are interested in unlimited interoperability
will a find a solution to ours. I'm sure OpenSim can accommodate all of
the above. As Teravus suggested, for our problem of unlimited
interoperability, the final key here is to authenticate the viewer's
endpoint. We're close.<br>
<br>
Crista<br>
<br>
Mark Malewski wrote:
<blockquote
cite="mid:f5f722b90902231823i43ebc915i4f1f94dfc3617c03@mail.gmail.com"
type="cite">
<div>Crista,</div>
<div> </div>
<div>If Grid owners chose to use OpenID to allow users to
authenticate (between grids) that would be a choice that a Grid owner
would have to make. You can't just expect ALL grids to be wide open,
without any form of interoperable secure authentication (trust) between
grids, and also expect everything to remain secure at the same time.</div>
<div> </div>
<div>You either have one, or the other. You either have trust, or
you don't have trust. The "trust agreement" needs to be done somehow,
and "OpenID" is just one simple "open standards" based "trust
agreement" that Grid owners could use.</div>
<div> </div>
<div>It seems like a very logical choice. </div>
<div> </div>
<div><a moz-do-not-send="true"
href="http://groups.google.com/group/google-federated-login-api/browse_thread/thread/dc0923363b5ef2dc/e46014d89ab520c2">http://groups.google.com/group/google-federated-login-api/browse_thread/thread/dc0923363b5ef2dc/e46014d89ab520c2</a></div>
<div> </div>
<div>Grid owners (who chose to implement OpenID logins) could just
have a login page similar to this:</div>
<div> </div>
<div><a moz-do-not-send="true"
href="http://wiki.openid.net/session/login?page_name=OpenIDServers">http://wiki.openid.net/session/login?page_name=OpenIDServers</a></div>
<div> </div>
<div>With a little "OpenID" symbol, so users knew they could login
with their OpenID login. Again, this "trust" relationship would then
be done by OpenID (between grids).</div>
<div> </div>
<div><strong><em>> For those of you who don't know, this already
exists. Click this:<br>
</em></strong>> <a moz-do-not-send="true"
href="http://osgrid.org:8002/users/charles_krinke" target="_blank"><strong><em>http://osgrid.org:8002/users/charles_krinke</em></strong></a><br>
<strong><em>> or this:<br>
</em></strong>> <a moz-do-not-send="true"
href="http://ucigrid00.nacs.uci.edu:8002/users/crista_lopes"
target="_blank"><strong><em>http://ucigrid00.nacs.uci.edu:8002/users/crista_lopes</em></strong></a><strong><em>
</em></strong></div>
<div> </div>
<div>I do apologize, I just checked both of those links, and didn't
realize that OS Grid and UCI were both already setup to run their own
OpenID identity servers.</div>
<div> </div>
<div>Then nevermind, I retract what I was saying earlier, because
there would not need to be any form of "trust relationship" between
grids, as the "trust" relationship would be established via the OpenID
server.</div>
<div> </div>
<div>Each Grid would need to allow users to login/authenticate by
either having an OpenID login page, but yes... if osgrid and ucigrid
are both running OpenID identity servers then something like this could
be implemented.</div>
<div> </div>
<div><strong><em>> I'm not going to act on anything that suggests
"trust agreements between various grids." </em></strong></div>
<div> </div>
<div>I'll clarify that statement, by saying/explaining that the
"trust agreements" between various grids would be done via OpenID
standards (an OpenID login using an OpenID identity server).</div>
<div> </div>
<div>I do apologize, and I did not know that osgrid already had an
OpenID identity server setup.</div>
<div> </div>
<div> </div>
<div><strong><em>>The goal is to be able to go from my home
standalone to *any* sim out there that I know >nothing about, and
still be sure that nothing bad will happen to my belongings. Anything
less >than this is not acceptable as a goal, for me.<br>
</em></strong></div>
<div>I stand corrected, yes... you could "in theory" move between
grids by using something like OpenID to authenticate across grids.</div>
<div> </div>
<div><strong><em>> This way various grids could all run "openID"
servers, and trust agreements would need</em></strong></div>
<div><strong><em>> to be </em></strong><strong><em>established
between the various grids.</em></strong></div>
<div> </div>
<div>Again, let me clarify... various grids could run OpenID servers,
and the "trust agreements" would be established by the various OpenID
identity servers. </div>
<div> </div>
<div> Mark</div>
<div> </div>
<div>P.S. What OpenID servers are OS Grid, and <a
moz-do-not-send="true" href="http://uci.edu">uci.edu</a> running? Are
they using a OpenID 2.0 compliant identity server? Are you using
Prairie? NetMesh InfoGrid LID PHP? </div>
<div> </div>
<div> </div>
<div>On Mon, Feb 23, 2009 at 7:05 PM, Diva Canto <span dir="ltr"><<a
moz-do-not-send="true" href="mailto:diva@metaverseink.com">diva@metaverseink.com</a>></span>
wrote:<br>
</div>
<div class="gmail_quote">
<blockquote class="gmail_quote"
style="border-left: 1px solid rgb(204, 204, 204); margin: 0px 0px 0px 0.8ex; padding-left: 1ex;">
<div text="#000000" bgcolor="#ffffff">
<div class="Ih2E3d">Mark Malewski wrote:
<blockquote type="cite">
<div>Just to clarify...</div>
<div> </div>
<div><strong><em>> Grids could provide openIDs in the form of "</em></strong><a
moz-do-not-send="true" href="http://openid.osgrid.net/screenname"
target="_blank"><strong><em>openid.osgrid.org/users/screenname</em></strong></a><strong><em>"</em></strong></div>
<div> </div>
<div>With all grids being independent of one another, or in the
example given by John, maybe use an "<a moz-do-not-send="true"
href="http://openid.osgrid.org/users/screenname" target="_blank">openid.osgrid.org/users/screenname</a>"</div>
<div> </div>
<div><a moz-do-not-send="true"
href="http://openid.osgrid.org/users/Charles_Krinke" target="_blank">http://openid.osgrid.org/users/Charles_Krinke</a></div>
<div> </div>
</blockquote>
</div>
For those of you who don't know, this already exists. Click this:<br>
<a moz-do-not-send="true"
href="http://osgrid.org:8002/users/charles_krinke" target="_blank">http://osgrid.org:8002/users/charles_krinke</a><br>
or this:<br>
<a moz-do-not-send="true"
href="http://ucigrid00.nacs.uci.edu:8002/users/crista_lopes"
target="_blank">http://ucigrid00.nacs.uci.edu:8002/users/crista_lopes</a>
<div class="Ih2E3d"><br>
<br>
<blockquote type="cite">
<div>Again, in this example Charles happens to have his identity
at OSGrid, but that's not a requirement of the exchange. It could just
as easily been an identity from another grid.</div>
<div> </div>
<div>This way various grids could all run "openID" servers, and
trust agreements would need to be established between the various grids.</div>
</blockquote>
</div>
I'm not going to act on anything that suggests "trust agreements
between various grids." That's an AWG concept that I very much disagree
with, and want no part in. I have no problem with companies cutting
corners on security in order to be able to exchange agents on a
lawyer-backed up trust basis. But that's not what I'm doing here, and
that's not what a lot of people want OpenSim to be.<br>
<br>
The goal is to be able to go from my home standalone to *any* sim out
there that I know nothing about, and still be sure that nothing bad
will happen to my belongings. Anything less than this is not acceptable
as a goal, for me.<br>
<br>
Crista<br>
<br>
</div>
<br>
_______________________________________________<br>
Opensim-dev mailing list<br>
<a moz-do-not-send="true" href="mailto:Opensim-dev@lists.berlios.de">Opensim-dev@lists.berlios.de</a><br>
<a moz-do-not-send="true"
href="https://lists.berlios.de/mailman/listinfo/opensim-dev"
target="_blank">https://lists.berlios.de/mailman/listinfo/opensim-dev</a><br>
<br>
</blockquote>
</div>
<br>
<pre wrap="">
<hr size="4" width="90%">
_______________________________________________
Opensim-dev mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Opensim-dev@lists.berlios.de">Opensim-dev@lists.berlios.de</a>
<a class="moz-txt-link-freetext" href="https://lists.berlios.de/mailman/listinfo/opensim-dev">https://lists.berlios.de/mailman/listinfo/opensim-dev</a>
</pre>
</blockquote>
<br>
</body>
</html>