[Marty]And, if I sell my iname to someone, and
give them the password, how would 2IDI ever even know that event has
happened?
[Chasen,
Les] If you turn over your identity, which includes your iname and inumber, to
someone else then they are really masquerading as you. Of course that is
not controllable by anybody. If you release
*just*
your iname which is the appropriate way to give someone else your iname,
assuming you do not want to give up your identity, they get their own
inumber. This is why all IDPs MUST use your inumber as your trusted
identifier.
[Marty] I think if I sell/give "control" of "=marty" and the underlying
inumber and the password to someone else (for purposes of discussion, let's say
Marty McFly), then I've sold them an identifier, control of certain attributes
associated with that identifier, and any reputation that has been built up
around that identifier (at least until the new owner's actions cause the
reputation to change). While I agree that sounds like aspects of my identity,
I'm not sure it's really my identity. When Marty McFly then starts buying stuff
using =marty (and the underlying inumber), will I somehow remain liable to pay?
I'm assuming that there's ways to associate AND disassociate information from
the inumber (like changing the owner's name, address, credit card number), so if
I properly disassociate my data from the iname/inumber before giving it to Marty
McFly, then I don't see how I could later be responsible for McFly's actions.
Please
don't get me wrong - I really like XRIs. I just don't understand all the
advertized features, e.g., how XRIs can be administered to
guarantee persistence. When I evangelize XRI here at Boeing I don't talk
much about persistence.
Marty.Schleiff@boeing.com;
CISSP
Associate
Technical Fellow - Cyber Identity Specialist
Computing Security
Infrastructure
(206)
679-5933
From:
Schleiff, Marty [mailto:marty.schleiff@boeing.com]
Sent: Tuesday, December 19, 2006 12:48
PM
To: Chasen, Les; Gabe
Wachob; xri@lists.oasis-open.org; phil@windley.org
Subject: RE: [xri] Our Best Friend Phil
Windley!
In his blog, Phil
said, "Further, i-names are
not reassignable (unlike domain names), so when you contact the person at
=windley, you know it's me, not just the next guy to pick up the name when I
let it expire." I think is not
correct.
[Chasen,
Les] This is not 100% accurate. I-names are re-assignable i-numbers are
not.
And, if I sell my
iname to someone, and give them the password, how would 2IDI ever even know
that event has happened?
[Chasen,
Les] If you turn over your identity, which includes your iname and inumber, to
someone else then they are really masquerading as you. Of course that is
not controllable by anybody. If you release
*just*
your iname which is the appropriate way to give someone else your iname,
assuming you do not want to give up your identity, they get their own
inumber. This is why all IDPs MUST use your inumber as your trusted
identifier.
Marty.Schleiff@boeing.com; CISSP
Associate Technical Fellow - Cyber
Identity Specialist
Computing Security
Infrastructure
(206) 679-5933
From:
Chasen, Les [mailto:les.chasen@neustar.biz]
Sent: Tuesday, December 19, 2006 7:52
AM
To: Schleiff, Marty;
Gabe Wachob; xri@lists.oasis-open.org; phil@windley.org
Subject: RE: [xri] Our Best Friend Phil
Windley!
Your password will
not work for the new person. The reason is that you can sell your name
but you cannot sell your inumber. The inumber is persistent and will
*never* be reassigned to
another person.
From:
Schleiff, Marty [mailto:marty.schleiff@boeing.com]
Sent: Tuesday, December 19, 2006 10:49
AM
To: Gabe Wachob;
xri@lists.oasis-open.org; phil@windley.org
Subject: RE: [xri] Our Best Friend Phil
Windley!
I never considered
my i-name to be permanent. Is Phil correct about that? What if I just sell
my i-name to someone else and tell them the
password?
Marty.Schleiff@boeing.com; CISSP
Associate Technical Fellow -
Cyber Identity Specialist
Computing Security
Infrastructure
(206) 679-5933
From:
Gabe Wachob [mailto:gabe.wachob@amsoft.net]
Sent: Monday, December 18, 2006 6:00
PM
To:
xri@lists.oasis-open.org; phil@windley.org
Subject: [xri] Our Best Friend Phil
Windley!
http://blogs.zdnet.com/BTL/?p=4165
This is the best endorsement
of INames and XRI we’ve had in a while.
I’m even more appreciative of
the public comments from Phil given the fact that he was one of the folks
in the IIW “Creative Uses of INames” that was raising issues about how
hard it was to experiment and play with INames as an end user or
developer. This in turn prompted me to write my a blog entry about “The
Thrill of the Hack”: http://blog.wachob.com/2006/12/the_thrill_of_t.html
in which I take a self-critical view of the developer-community outreach
by the INames (and XRI) community.
So again, thanks Phil for
keeping the XRI torch burning while also keeping our feet to the
fire!!!
-Gabe
|