LIDAuthenticatedTrackBack

From LID Wiki

LID-Authenticated TrackBack

{proposed} Blog TrackBacks, while very useful, unfortunately suffer from TrackBack Spam. We propose to extend the TrackBack Technical Specification by a LID(tm)-style URL signature, thereby confirming the digital identity (LID) of the sender.

The essence of the proposal is to append the following arguments to the TrackBack URL:

...?lid=CLIENTID&lid-credtype=CREDTYPE&lid-nonce=NONCE&lid-credential=CREDENTIAL

Where:

• the allowed CREDTYPEs are the same as for the other LID(tm) functions, as defined in LID Credential Types.
• CREDENTIAL is typically a digital signature according to the selected CREDTYPE.
• NONCE is the current date and time at the server hosting CLIENTID
• CLIENTID is the LID(tm) URL of the LID Client initiating the TrackBack.

See also: LID SSO Profile and LID Relying Party Profile.