Re: [xri] FW: Dereferencing rules are required for interop

["Tan, William" <William.Tan@neustar.biz>]

I think I agree with Markus, and maybe this is where my opinion about 
CID verification differs from Steve's.

With the original motivating use case of CID verification in mind, which 
is to prevent one authority from spoofing another authority's CID from 
another part of the tree. /Ideally, /clients using a /proxy resolver/ 
would just request for a filtered XRD using 
_xrd_r=application/xrd+xml%3Bsep=true%3Brefs=true%3Bcid=true
And if clients has only this choice (of using a proxy resolver and can 
only make a single call), the side effect is that you have the take the 
CID from the final XRD in the entire resolved XRDS. It also has the 
interesting effect of allowing a model whereby a client will use as 
primary key the CID of =steven.churchill when @ootao*steve contains a 
Ref to =steven.churchill's CID. This may not suit the model for all 
client applications that consume XRIs, but a certain class of 
application may want to specify this particular behavior. IMO specifying 
this is out of the scope of the resolution specs.

Specifying that the CID query parameter affects the decision of whether 
to follow a Ref or not kind of imposes equivalence semantics onto Refs, 
which we are trying to separate.

=wil

Markus Sabadello wrote:
> Hey Steve,
>
> Are you sure about lines 3 and 5 in the table? Should a Ref be 
> dereferenced just because there is no CID in the XRD? Even if there is 
> a matching SEP?
>
> My understanding of CID verification was that it simply verifies a CID 
> (if there is one), not influence the resolution process, but maybe I 
> was wrong. Maybe its purpose is more like "give your best to find me a 
> verified CID".
>
> Markus
>
> On 8/21/07, *Steven Churchill* <steven.churchill@xdi.org 
> <mailto:steven.churchill@xdi.org>> wrote:
>
>     Woops. I sent this to the list last week but it bounced due to my
>     not using my xdi.org <http://xdi.org> account.
>
>      
>
>     ------------------------------------------------------------------------
>
>     *From:* Steve Churchill [mailto:steven.churchill@ootao.com
>     <mailto:steven.churchill@ootao.com>]
>     *Sent:* Friday, August 17, 2007 12:10 PM
>     *To:* 'xri@lists.oasis-open.org <mailto:xri@lists.oasis-open.org>'
>     *Subject:* Dereferencing rules are required for interop
>
>      
>
>     Drummond,
>
>      
>
>     I've sent this document to you at least twice already. It does not
>     appear in the spec.
>
>      
>
>     If you do not feel that this specificity is absolutely required
>     for interoperability, then please explain why.
>
>      
>
>     ~ Steve
>
>      
>
>
>
>
>