Re: [dix] Re: [Ietf-http-auth] BOF Request: WARP - Web Authentication Resistant to Phishing

[Sam Hartman <hartmans-ietf at mit.edu>]

>>>>> "Eric" == Eric Rescorla <ekr at networkresonance.com> writes:

    Eric> Sam Hartman <hartmans-ietf at mit.edu> writes:
    >>>>>>> "Eric" == Eric Rescorla <ekr at networkresonance.com> writes:
    >>
    Eric> Sam Hartman <hartmans-ietf at mit.edu> writes:
    >> >> Yes, your understanding is correct.
    >> 
    Eric> Good. Then we have a basis to talk about them.
    >>  I basically agree with the general statements you have made.
    >> I believe that the specific example of age verification on the
    >> web will tend not to fall into the case where people use
    >> independently asserted idenity claims especially in the medium
    >> future.  I don't have high confidence in that belief though and
    >> I don't think it matters much whether I'm right or not.  We
    >> both agree that there will be third party claims.
    >> 
    >> As I've said before I think that whatever we design needs to
    >> eventually support claims and third party claims.

    Eric> I think there's a missing part to this statement: if you
    Eric> plan to support third party claims, I think there's a pretty
    Eric> strong argument that such claims need to be independently
    Eric> assertable.

Agreed.

_______________________________________________
dix mailing list
dix at ietf.org
https://www1.ietf.org/mailman/listinfo/dix