Public Review of Extensible Resource Identifier (XRI) Resolution V 2.0 - 15 day review

2008-03-10 Thread Drummond Reed
FYI - XRI Resolution 2.0 is now undergoing one more 15-day public review after incorporation of feedback from the previous 60-day public review in December and January. Links to both the change-marked and clean version of the spec are in the announcement below. =Drummond -Original Message---

RE: [OpenID] Problems with OpenID and TAG httpRange-14

2008-03-10 Thread Drummond Reed
Exactly, David, that's the process I was referring to. It should be as lightweight as possible. I guess the main question is, is there sufficient interest in either a bugfix release or a more significant new release to start up a mailing list on OpenID Authentication yet? =Drummond > -Orig

Re: [OpenID] Problems with OpenID and TAG httpRange-14

2008-03-10 Thread David Recordon
I don't see why changes would really need to wait, if there is an interested group of people then lets spin up a mailing list and get participants to agree to the IP policy. The entire goal of having "working groups" and seperate mailing lists is to help ensure that future OpenID specs are n

Re: OWASP Review

2008-03-10 Thread David Recordon
Hey James, I suppose there could be merit, but my guess is that if you want it to happen then you'll need to organize it. --David On Mar 10, 2008, at 1:38 PM, "McGovern, James F (HTSC, IT)" <[EMAIL PROTECTED] > wrote: > > Is there merit in having a third-party group such as OWASP > (http://w

OWASP Review

2008-03-10 Thread McGovern, James F (HTSC, IT)
Is there merit in having a third-party group such as OWASP (http://www.owasp.org) provide a third-party opinion that is public on the security of OpenID? Having large entities market OpenID will help spread the word even faster. ***

RE: [OpenID] Problems with OpenID and TAG httpRange-14

2008-03-10 Thread Drummond Reed
Brad, You are correct, the OIDF is not a technical forum. Its responsibility is to help facilitate the operation of the technical forum and the applicable IPR policy. The issue I was pointing out was that since the new IPR policy was adopted in December, which calls for explicit workgroups for

Re: [OpenID] Problems with OpenID and TAG httpRange-14

2008-03-10 Thread Brad Fitzpatrick
Drummond, I was under the impression that the OpenID Foundation wasn't a technical forum. Is that not true? - Brad On Mon, Mar 10, 2008 at 10:46 AM, Drummond Reed <[EMAIL PROTECTED]> wrote: > > -Original Message- > > From: Noah Slater [mailto:[EMAIL PROTECTED] > > Sent: Monday, March 1

RE: [OpenID] Problems with OpenID and TAG httpRange-14

2008-03-10 Thread Drummond Reed
> -Original Message- > From: Noah Slater [mailto:[EMAIL PROTECTED] > Sent: Monday, March 10, 2008 1:43 AM > To: Drummond Reed > Cc: specs@openid.net > Subject: Re: [OpenID] Problems with OpenID and TAG httpRange-14 > > > Noah, you are in the right place (and the General list is the wrong >

Question on Association Secrets

2008-03-10 Thread Oliver Welter
Hi All, I am a reaerch assistant and working on the field of trusted computing and privacy protection and currently evaluate benefits of OpenID and TC-Infrastructures. One thing that is unclear for me from the spec, is about the association secret / session. 1) Is an individual session de

Re: [OpenID] Problems with OpenID and TAG httpRange-14

2008-03-10 Thread Noah Slater
> Noah, you are in the right place (and the General list is the wrong place, > which is why I have removed that cc). Okay, thank you. > Once those groups start, they will each have dedicated mailing lists. In the > meantime, this is the list for discussing any spec issues. So far one OpenID > Aut