Re: [xri] trust vs signatures

[Peter Davis <peter.davis@neustar.biz>]

On Jan 7, 2009, at 1:39 PM, Brian Eaton wrote:

>   I'd also love to see a DNS trust profile for
> Peter's work.

shooting for a draft before tomorrows call.

> On Tue, Jan 6, 2009 at 9:48 PM, Nat Sakimura <n-sakimura@nri.co.jp>  
> wrote:
>> As to the "cert" is concerned, though it is currently written to be  
>> X.509, I
>> think it could equally be something like GPG.
>> If we separate out the trust portion, that becomes easier and the  
>> SimpleSign
>> becomes more generic.
>> (i.e., I like the idea.) Of course then, we need to tell what kind  
>> of cert
>> it is as well. Perhaps we should indicate it in the XRD/@sigalg.

Yes, i think we will need schema to reflect:

XRD/@trustprofile
XRD/@sigprofile
XRD/@sigalg
XRD/Signature (for the sigprofile specific matter)

=peterd