| At line 2 added 10 lines |
| !!What We Need |
| |Privacy | Wiki federation members identify themselves using security tokens such as public encryption keys. All data is stored encrypted at each federated site |
| |Redaction | Wiki federation members can specify content as transient and remove it from the federation at will |
| |Embedded | Wiki federation members content appears embedded in each member site. Every federation member has complete control over which content appears in their site. |
| |Quarantine| Sites can be automatically removed from federation based on rules |
| |Instant Messaging | remember the BBS, posting content and chatting are the same thing. |
| |Peer to Peer | the web site is the client, I post to my website, the content appears on your web site |
| | Identity | Federation between people who are actually known to each other |
| |Publish and Subscribe | Your site subscribes to my site, when I add content to my site, your site receives it immediately (JMS over the HTTP!!) |
| |No Edit.jsp | in-line editing, not switching modes. |
| At line 45 added 12 lines |
|
| !!Example |
|
| I have a wiki (an editable web site). |
| I have 5 friends whom I know well who I wish to allow access to this wiki. |
| Each of these friends has an identity token of some kind in the identity haven. |
| I configure my wiki to allow owners of those tokens access to read and/or write pages in the wiki. |
| I send my friends a URL to my wiki. They do not have to register, they simply have to unlock their tokens to verify their identity. |
|
| In this case, an OpenID provider would be sufficient. As long as I personally collected and verified (e.g. in person) that the OpenIDs belong to the 5 people I know, that would be enough. However, if these 5 people are using a non-trustworthy OpenID provider (e.g. Google, Yahoo!, Facebook) then I will not feel that my wiki is fully protected. |
|
| Actually implementing this would only require a slight modification to an OpenID client to check the submitted ID against an access control list, before redirecting to the OpenID provider for verification. |