Re: [xri] XRD Signing and Trust

[Will Norris <will@willnorris.com>]

On May 22, 2009, at 1:10 PM, Will Norris wrote:

> yeah, that was actually a bad example, because it's delegating the  
> user's XRD, not a specific service.  Imagine I hosted my own XRD,  
> but still wanted to delegate to Google as my OpenID Provider...
>
> <Link>
>  <Rel>http://example.com/openid/provider</Rel>
>  <URI>https://www.google.com/a/mydomain.com/openid</URI>
>  <trust:TargetSubject>http://mydomain.com</trust:TargetSubject>
>  <trust:TargetAuthority>hosted-id.google.com</trust:TargetAuthority>
> </Link>

this would actually also need an <openid:Delegate> element within  
Link... forgot that.  It would either be my openid URL at Google or,  
more realistically, the identifier_select URL.

-will