On 11-Feb-06, at 3:17 PM, Eric Rescorla wrote:
Client Membersite Homesite 1 Hello --------------------------> 2 <------- Enter homesite URL 3 Homesite URL -------------------> 4 Get capabilities ----------> 5 <------------- Capabilities 6 <------ Redirect to Homesite 7 Get Ticket--------------------------------------------------> 8 <----------------------------------------------------- Ticket 9 Ticket -------------------------> 10 Verify ticket --------------> 11 <----------------------- Ticket OK 12 <------------------------ OK There's one more detail that I haven't mentioned: in order to enable automatic submission of the abovementioned form (2,3), this document specifies a particular form for the page (i.e., particular names for form input fields) so that clients can detect it and auto-fill-in.
This also allows an enhanced browser to detect the request and rewrite the action for the page and process the request directly. This could include the enhanced browser acting as the Homesite. We have a prototype of this running now. It is pretty easy to do the protocol stuff. The data management is a little more work. :)
-- Dick _______________________________________________ dix mailing list [email protected] https://www1.ietf.org/mailman/listinfo/dix
