[dix] Re: [Ietf-http-auth] BOF Request: WARP - Web Authentication Resistant to Phishing

[Sam Hartman <hartmans-ietf at mit.edu>]

>>>>> "John" == John Merrells <merrells at sxip.com> writes:

    John> I'm not sure if you're saying this but... DIX does not
    John> impose any specific number of identifiers on a user. They
    John> can have as many as they choose to have, from 0 to infinity.

No, but dix does support transporting more than one claim and does
support claims that are not identifiers.

I don't view doing so as a requirement.

    >> but that can transition to more complex forms of identity
    >> claims in the future.  You seem to want sets of identity claims
    >> today.

    John> I find the 'claim' term to be a bit ambiguous, so try to
    John> avoid it.  I'm not sure how claims relate to identifiers in
    John> your comment above.

I use the terms claim, identity, subject and relying party as they are used in the Laws of Identity paper.

An identifier is a claim that is alegidly unique; email addresses are
viewed by some as identifiers.  Email addresses *are* the identifier
within the namespace of amazon.com identifiers as an example.

--Sam

_______________________________________________
dix mailing list
dix at ietf.org
https://www1.ietf.org/mailman/listinfo/dix