dotgnu-auth
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Auth]Impressions of XNS


From: David Sugar
Subject: Re: [Auth]Impressions of XNS
Date: Thu, 27 Sep 2001 09:53:47 -0400
User-agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:0.9.3) Gecko/20010802

I never objected to a centralized authentication scheme, just to having only one authentication authority, or one that could not be deployed freely on free software by anyone at any level at any location. If I can run a server at home and can have it be my authentication "authority" for my family, and have it keep my "identity" information at home, then I believe the essential goals of DotGNU are effectivily met. If only a single vendor, a privileged "vendor", a specific group of vendors, or "organization" can run authentication or hold identity information for me, and the methods of operation involve trade secrets or source secret systems running on proprietary software, then I believe no "liberty" has been achieved and such systems do not meet any of our goals.

With that, I think it is possible to establish a reasonable "means" test for determining if XNS does meet our goals, either in part or in full, in this area.

David

Norbert Bollow wrote:

Here are some impressions of XNS, see http://www.xns.org

I haven't seen their code, but apparantly they have a good,
carefully-designed architecture, and they've implemented it in
Java.

One aspect of XNS which makes it very interesting for DotGNU
that it will be possible to do everything in a strictly
peer-to-peer way.  They're planning to provide "root agencies"
which map global names ("XNS names") to URLs, but using those
is entirely optional to using XNS.  I'd personally consider this
a main reason that makes me feel comfortable with the idea of
using XNS in DotGNU.

The main problem which has so far prevented release of this code
is that the company which has (so far) funded the development
efforts, and which has been awarded three patents by the USPTO,
needs to find some way to recover their investment and make a
profit from it.  It won't work for them to simply give
everything as a gift to the world, but on the other hand they
really want the Free Software and Open Source communities to
embrace XNS.  So they need to do something about those patents,
like for example licensing them at zero cost to everyone who
wants to use them in GPL'd code.  (BTW I think those patents
could be successfully challenged with Prior Art, but I think
that it would not be right for us to cooperate in any way with
any organisation which uses patents against any kind of Free
Software project.  For this reason I think that they need to
freely license their patents in some way before we can start
cooperating with XNSORG in any way.)

The company which has funded development of XNS so far is a
small company, and they will need to justify to their investors
whatever the decisions they make.  You can certainly imagine
that this is not an easy decision.  It seems to be the main
issue which is so far holding back a release of XNS.

Greetings, Norbert.





reply via email to

[Prev in Thread] Current Thread [Next in Thread]