SREG namespace URI rollback
Johnny Bufu
johnny at sxip.com
Mon Apr 2 20:05:40 UTC 2007
Or even:
> - RP doesn't support SREG1.0, but does support 2.0 extensions
> - RP sees in an XRDS that the OP supports SREG1.* (if the same
> namespace is used for both)
> - the OP actually only supports SREG1.0
- RP sends a SREG1.1 request, but with
openid.ns.some_alias=http://openid.net/sreg/1.0
openid.some_alias.required=...
- OP doesn't understand it
> - RP gets an SREG response without the namespace param
> - RP tries to extract SREG1.1, doesn't find a namespace and can't
> handle it
>
> So the OPs that will implement only SREG1.0 will not honor their
> statement in their XRDS files, which would require them to implement
> both versions.
Johnny
More information about the specs
mailing list