G'day all.
Will Price wrote:
We are only talking about formats here. Whether somebody wants to add a 10
MB Photoshop file, the collected works of shakespeare, fingerprint
information, a voiceprint, or a simple 20 character user ID is not relevant
here.
[...]
For convenience
and because it is simple, a photo ID constant has been defined and I'm sure
at a later point in time, other uses will be defined by this group.
I may be missing something here, but why don't we just mandate that
the attribute is a MIME document (possibly compressed, possibly
multipart), then leave the interpretation of that document up to the
client?
Somebody is going to want to stick in a voiceprint, someone is going
to want to put in their v-card (don't blame me; some people like them),
someone is going to want to put in a link to their web page etc etc.
Much easier to borrow an existing well-supported standard, IMO.
Possible security risk: It should be made clear to the person doing the
checking that information stored via a hyperlink is not necessarily
signed.
Cheers,
Andrew Bromage