14 Mar
2011
14 Mar
'11
9:08 a.m.
John, Patrick and I had a discussion about the pros and cons of federation models based on credentials versus assertions. The attached document is a preliminary result with conclusions like PKI and non-PKI federation models need to be combined in most cases at higher LoA To implement a federation an RFC 3647-style policy is insufficient; A more complete Trust Framework is needed Whereas the Higher Education sector favors brokered trust, e-Government and Industry prefer the PKI approach. But it is not a question of one way or the other. Request for feedback: I wonder where this discussion should be homed. FIWG, BCTF and TFMM are related, and it is also an extrakantarian issue. Any interest to take over this discussion? - Rainer