Guys,
Consent based systems don't exist. Challenge response systems do
exist...though often broken. Rather than create something new, let's try to
fix what we have..then understand how to design it better.
In other words, I have yet to receive a single comment on the CRI draft.
There's a lot of smart people in the group..let's hear it.
<snip>
Take a look at the mailing list archive (gmane.org), there were a few
articles with links to a bunch of XML formats that can be used
as a basis
or as an example for us. Also, I think basis this on XML should be a
requirement as well.
Yakov
I think I suggested a number of XML structures for this, and I have a
pretty good feel for where I was headed with that effort, and I
still think
XML is likely to be the best route. If the group feels this is a good
direction I would be willing to try and flesh out some examples and
specifications.
I recommend that we create an example that shows a hypothetical
implementation and then solicit comments. We will use the comments to
refine the example (replete with comments explaining what we've done and
why). When the example stabilizes we can write a complete specification
from that.
This is sort of like watching where the grass wears out around a
campus and
then pouring the sidewalks over the worn out paths.
_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg