Domain Authorization for PIDF-LO

1
Domain Authorization forPIDF-LO

• ltdraft-thomson-domain-auth-00.txtgt
• M. Thomson, J. Winterbottom
• IETF62

2
Rationale

• Recipient having confidence in who generated the
  location information
• Tying the location information to the device/user
• Providing assurances that the location
  information has not changed
• Useful to endpoints and intermediaries where this
  level of assurance is desirable.

3
Method

• Introduces a new Domain Authorization element
  that is a peer with the PIDF status element.
• Uses signatures as defined in RFC-3275
• An XML transform is defined to include
• Presentity
• All location-info elements in the tuple
• Tuple timestamp
• Expires (new datum in the Domain Authorization
  element)
• Transform designed to allow user to update or
  include personal ruleset without voiding
  signature.
• Each tuple is independently signed