{"id":769,"date":"2005-04-13T12:57:00","date_gmt":"2005-04-13T16:57:00","guid":{"rendered":"http:\/\/www.markbaker.ca\/wp\/2005\/04\/13\/drummond-reed-web-identifiers-are-broken\/"},"modified":"2005-04-13T12:57:00","modified_gmt":"2005-04-13T16:57:00","slug":"drummond-reed-web-identifiers-are-broken","status":"publish","type":"post","link":"http:\/\/www.markbaker.ca\/blog\/2005\/04\/drummond-reed-web-identifiers-are-broken\/","title":{"rendered":"Drummond Reed; Web identifiers are broken"},"content":{"rendered":"

Drummond mints a corollary<\/a>\nto one of\nKim Cameron’s Laws of Identity<\/a>;<\/p>\n\n

\nThe identifiers in a universal identifier metasystem MUST only reveal information identifying a user with the user’s consent.\n<\/blockquote>\n\n

… and follows it up with this bold claim;<\/p>\n\n

\nSo half the Web breaks this corollary before we’re even out of the starting gate. But it gets worse. Look at one of the current bulwarks of online identification: DNS. A standard requirement for most DNS name registries is accurate, current contact data for the registrant that is published publicly as “Whois” data. Although many registrars now offer proxy registration services to preserve registrant privacy and prevent spam, there’s no escaping that a major component of our current Internet identifier infrastructure breaks the First Corollary squarely in two.\n<\/blockquote>\n\n

Hmm, how exactly does Web\/Internet\/DNS breaks that corollary? I can’t see it.\nIs it because of DNS (and if so, why the “it gets worse” comment)? DNS does\ncertainly require a small amount of information be made available, and though I’m\nhardly a historian, the little I do know of the history of this data suggests that it\nrepresents the minimum amount that a mature industry – which has had to balance the\nneeds of domain owners (anonymity) with those of the public at large (accountability)\nover many years – has reached concensus on requiring. So I doubt that any competing\ncentralized solution would be able to reach widespread deployment without, in the\nsteady state, providing a similar amount of info about registrants.<\/p>\n\n

Also, who says that there’s a direct correspondence between a DNS name\nand the person who uses the email address? I don’t own gmail.com, nor yahoo.com,\nyet have email addresses at both of those domains. Google and Yahoo, in\noffering an email service, provide a degree of anonymity via proxy; if you\nwant to learn more about me there, you have to go through them, and I’m not\nrequired to publish any info about myself there.\nHushmail<\/a>‘s\nprobably the extreme case here, as they seem to exist to provide\nas-anonymous-as-possible email services.<\/p>\n\n

As you’d expect from a chair of the\nXRI TC<\/a>,\nhe then claims that\nXRIs<\/a>\ndon’t have this problem;<\/p>\n\n

\nSo can XRIs fix this problem? Yes. The first principle of XRI architecture is that XRIs are abstract – the association between an XRI and the real-world resource it represents is entirely under the control of its XRI authority (the person or organization registering the XRI, at any level of delegation). So nothing in an XRI need reveal anything about the authority’s identity or messaging address.\n<\/blockquote>\n\n

… which, as I’ve shown, is also the case with even DNS-bound URIs.<\/p>","protected":false},"excerpt":{"rendered":"Drummond mints a corollary to one of Kim Cameron’s Laws of Identity; The identifiers in a universal identifier metasystem MUST only reveal information identifying a user with the user’s consent. … and follows it up with this bold claim; So half the Web breaks this corollary before we’re even out of the starting gate. But […]","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-769","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"http:\/\/www.markbaker.ca\/blog\/wp-json\/wp\/v2\/posts\/769","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.markbaker.ca\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.markbaker.ca\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.markbaker.ca\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.markbaker.ca\/blog\/wp-json\/wp\/v2\/comments?post=769"}],"version-history":[{"count":0,"href":"http:\/\/www.markbaker.ca\/blog\/wp-json\/wp\/v2\/posts\/769\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.markbaker.ca\/blog\/wp-json\/wp\/v2\/media?parent=769"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.markbaker.ca\/blog\/wp-json\/wp\/v2\/categories?post=769"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.markbaker.ca\/blog\/wp-json\/wp\/v2\/tags?post=769"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}