Identity and Authentication Systems

2007-12-28T05:07:54Z

VidroNracr: cnaroltrocdr

letononob
Identifiers are the "X" and the "Y" in "X trusts Y" declarations, which are stored in RDF. Authentication methods are used in a client, before querying the TrustServer to compute a trust value.

Until we have a better idea, you must PGP-sign your RDF trust declarations, so that the origin of those declarations can be verified again later by anyone. Other possibilities, like OpenID, only authenticate the session not the document, so it cannot be independently verified later.

<table>
<tr>
<th>Identifier</th>
<th>Authentication Method</th>
<th>Supported in Konfidi</th>
</tr>

<tr>
<td>OpenPGP fingerprint</td>
<td>OpenPGP signature</td>
<td>Yes</td>
</tr>

<tr>
<td>RDF URI</td>
<td>none</td>
<td>current_version + 1</td>
</tr>

<tr>
<td>email address</td>
<td>SPF</td>
<td>current_version + 1</td>
</tr>

<tr>
<td>email address</td>
<td>DKIM</td>
<td>current_version + 1</td>
</tr>

<tr>
<td>YADIS URL</td>
<td>OpenID</td>
<td>current_version + 2</td>
</tr>

<tr>
<td>YADIS URL</td>
<td>XRI/i-names</td>
<td></td>
</tr>

<tr>
<td>X.509 Subject Unique Identifier</td>
<td>X.509 Signature</td>
<td></td>
</tr>

<tr>
<td>JabberID</td>
<td>?</td>
<td></td>
</tr>

</table>

See also [http://rdfweb.org/topic/FoafUniqueIdentifiers FOAF Unique Identifiers]

Konfidi - User contributions [en]

Identity and Authentication Systems