PAPE Extension Specification

Jonathan Daugherty cygnus at janrain.com
Mon Oct 8 23:56:39 UTC 2007


# Yep, the idea is for the PAPE spec to define a few generic and
# agreed upon policies and then RPs and OPs can create others.  Thus
# if there isn't agreement on a policy, there would be multiple policy
# URIs.  Same concept as in Attribute Exchange.

Using policy URIs to indicate certain modes of authentication is a
fine idea, but that doesn't really address the original issue: the
spec does not define "active" ("direct") authentication.

-- 
  Jonathan Daugherty
  JanRain, Inc.
  irc.freenode.net: cygnus in #openid
  cygnus.myopenid.com



More information about the specs mailing list