[Microid] MicroID hashing algorithm(s) and normalization

Fred Stutzman fred at metalab.unc.edu
Tue Nov 28 14:51:03 EST 2006


>
> So you'd have the same MicroID at any page at that domain (or subdomain
> if we figure that part out).
>
>>> -          If the URL ends with a directory or path (not a file, i.e.
>>> http://microid.org/somewhere), make sure it has a trailing slash at the end
>>> (i.e. http://microid.org/somewhere/)
>
> See above. Use http://microid.org/
>
> That is, I don't think we want per-page claims. At least not in general.
> Do you have a specific use case where that's important?

I view per-page claims as absolutely essential - there are lots of reasons 
why I'd want to claim http://del.icio.us/fstutzman and 
http://del.icio.us/fstutzman/facebook separately.  To "boil down" to a 
domain level basis would also not support multiple claims to a namespace. 
We definitely need to keep the system URL-specific so that claims can be 
made on individual URL's.


>
>
> Personally I don't see a big difference here between HMAC and SHA1 here
> because we're not attempting to provide cryptographic assurance. I think
> we need to settle on one algorithm and leave it at that. Fewer options,
> fewer ways to go wrong.
>

+1


-- 
Fred Stutzman
claimID.com
919-260-8508
AIM: chimprawk



More information about the Microid mailing list