trust profiles for XRD

[Brian Eaton <beaton@google.com>]

Hi folks -

I've written up some notes on trust profiles for XRD discovery:

http://wiki.oasis-open.org/xri/XrdOne/TrustProfiles

I've also written up a no security trust profile roughly equivalent to
what OpenID does today:

    http://wiki.oasis-open.org/xri/XrdOne/TrustProfileNoTrust

... and a second trust profile based on HTTP authority:

    http://wiki.oasis-open.org/xri/XrdOne/TrustProfileHttpAuthority

There are some disconnects between the work flow that Eran has been
describing, the trusted discovery workflow that I put on the wiki last
week, and these example trust profiles.  I think resolving those
disconnects is a good work item for this week.

Constructive criticism of the overall trust profile framework would be
really useful.

Additional comments on whether the http authority trust profile could
be modified so as to be suitable for Bob's use cases would be great.

A detailed description of the "one cert per identity" trust profile
would be useful as well, to see whether it fits into the trust profile
framework I wrote up, and to figure out how the trust profile
framework needs tweaking so that it can fit.

Cheers,
Brian