SREG namespace URI rollback

Johnny Bufu johnny at sxip.com
Mon Apr 2 20:05:40 UTC 2007


Or even:

> - RP doesn't support SREG1.0, but does support 2.0 extensions
> - RP sees in an XRDS that the OP supports SREG1.* (if the same
> namespace is used for both)
> - the OP actually only supports SREG1.0

- RP sends a SREG1.1 request, but with
	openid.ns.some_alias=http://openid.net/sreg/1.0
	openid.some_alias.required=...
- OP doesn't understand it

> - RP gets an SREG response without the namespace param
> - RP tries to extract SREG1.1, doesn't find a namespace and can't
> handle it
>
> So the OPs that will implement only SREG1.0 will not honor their
> statement in their XRDS files, which would require them to implement
> both versions.


Johnny




More information about the specs mailing list