[OpenID] About Facebook, MySpace and OpenID

Allen Tom atom at yahoo-inc.com
Mon Apr 6 22:50:39 UTC 2009


Martin Atkins wrote:
>
>  * A protocol extension that allows an OP to signal that it has 
> verified the provided email address, for some definition of verified.
AX 2.0 will allow attributes to have metadata, so an OP would be able to 
indicate that an email address was verified. OPs will probably also be 
able to say when the address was verified, and whether or not the OP is 
also the email provider for the address.

Whether or not an RP should trust an OP to make claims about a user's 
email address is a different discussion altogether.

Allen










More information about the general mailing list