... That's fine in the abstract sense, but * An atom document has an atom structure * A html document has a html structure * A train list document has a train...
... More than that, my user agent (even if it's just a browser) can wander around that graph. but ... Both of these will describe part of a graph-shaped model,...
Comments inline. ... Ah, but that's what you want, because it seems you're taking the view of a developer. One of the desirable properties in an information...
... Maybe you do; but I think what I've said is objectively true. ... RDF: check, but also at a higher level than parsing; RDF's notion of mI extends into...
Hi, all, The scenario is as follows: Suppose that a request from a client need to be processes by service A and then the result is either forwarded to service...
I have my mind pretty much made up already, but is there any justification for putting an API key (as usually required for a public-facing Web API) into the...
... No reason at all. This is just the authentication issue in another guise. Worse than that, it's a "you can't use our possibly stateless API except by ...
It makes it easy to explore the API in a browser (as would any kind of standard browser-supported authentication mechanism, opposed to a custom HTTP header). ...
... Only unless you absolutely had to, to get something done for next week. I'm not sure what that would be ;) Are you extending this thinking to phpsessionid,...
... If the resource depended on the API key (e.g., were customized / localized / branded) it might be reasonable. (Or if you're trying to provide a read-only...
... How about both? Generally you want to enable some form of strictness but also enable people to actually do things with the rather lame tools that exist in...
Yes, one could allow for an optional apikey= query parameter instead of the header. The problem with this, though, is that one can't prevent people to use this...
... API keys are just authentication tokens aren't they? Why can't you use authentication to do this job? -- Nic Ferrier ... Need a linux/java/python/web...
... WS-A is surprisingly less helpful than you think. You need to be sure that all participants in the conversation are using the same version of WS-A, that...
... Thanks for recognizing this. (Sorry for the late reply, I just found this email; need to update my inbox rules...) You explained it far more succinctly...
... Here's a thought/question: The URI Opacity Axiom was conceived prior to the existence of URI Templates. Assuming URI Templates makes it's way to a ...
... From someone who just started exploring core web technologies and the semantic web mid-2006 but having since immersed myself into learning these things, I...
... URIs are only as opaque as the standards around them deem them to be. For example, RFC 2617 (Basic and Digest) requires the client to look into the path of...
... Plain authentication would me my #1 choice, but it might be used independently from the API key - i.e. the same user might use different third parties to...
"Atom" commonly refers to the Atom Syndication Format (the RSS alternative) http://www.atomenabled.org/developers/syndication/atom- format-spec.php "APP" is...
... Am I going crazy, or didn't you just differentiate the two by giving me the same URL for both? -- -Mike Schinkel http://www.mikeschinkel.com/blogs/ ...
... Though I'm not too partial to the APP acronym, given how oftern the term "app" is uses in the IT field, there does need to be a distinction between the...
Sorry, my explanation wasn't really understandable. I meant that an entity A might offer an API to access its services. Entities B and C might use this API,...
... I don't see why this stops you using authentication to provide access to the API. Indeed, this is just the model I'm trying to build for OpenID ...