<HTML><HEAD></HEAD>
<BODY dir=ltr>
<DIV dir=ltr>
<DIV style="FONT-FAMILY: 'MV Boli'; COLOR: #800080; FONT-SIZE: 14pt">
<DIV
style="FONT-STYLE: normal; DISPLAY: inline; FONT-FAMILY: 'Calibri'; COLOR: #000000; FONT-SIZE: small; FONT-WEIGHT: normal; TEXT-DECORATION: none">
<DIV style="FONT: 10pt tahoma">
<DIV><STRONG><FONT color=#800080 size=4 face="MV Boli">SPAMM YOU HAVE BEEN
REPORTED TO THE SEC AND FCC AND FISA, AS I HAVE PUT YOU IN MY JUNK MAIL, AND YOU
ARE HACKING BACK IN.</FONT></STRONG></DIV>
<DIV><STRONG><FONT color=#800080 size=4
face="MV Boli"></FONT></STRONG> </DIV>
<DIV><STRONG><FONT color=#800080 size=4 face="MV Boli">THIS IS A THIRD DEGREE
FELONY! unsubscribe now!</FONT></STRONG></DIV>
<DIV style="BACKGROUND: #f5f5f5">
<DIV style="font-color: black"><B>From:</B> <A title=d8526k@nottheoilrig.com
href="mailto:d8526k@nottheoilrig.com">Jack Bates</A> </DIV>
<DIV><B>Sent:</B> Wednesday, October 26, 2011 12:51 PM</DIV>
<DIV><B>To:</B> <A title=openid-code@lists.openid.net
href="mailto:openid-code@lists.openid.net">openid-code@lists.openid.net</A>
</DIV>
<DIV><B>Subject:</B> Re: [Code] Python library only supports assertions sent as
GET (not POST)</DIV></DIV></DIV>
<DIV> </DIV></DIV>
<DIV
style="FONT-STYLE: normal; DISPLAY: inline; FONT-FAMILY: 'Calibri'; COLOR: #000000; FONT-SIZE: small; FONT-WEIGHT: normal; TEXT-DECORATION: none">I
think this is an important issue because many sites employ the
Python<BR>library, e.g. bitbucket.org<BR><BR>As a result of this issue, some
users cannot log in to these sites with OpenID,<BR>and only a general error
explains why not<BR><BR>I think this issue hurts OpenID adoption because some
users get an unreliable<BR>experience (some users cannot log in to some sites
with OpenID). I think it<BR>also hurts adoption because site developers have an
unreliable experience:<BR>There's an interoperability problem between a popular
library and some<BR>conformant OpenID providers<BR><BR>If there are no
objections to the change introduced in this pull request, is<BR>anyone on this
list able to accept it?<BR><BR>If there are any objections to the change
introduced in this pull request, I am<BR>happy to help address them!<BR><BR>On
Thu, Oct 20, 2011 at 11:36:43AM -0700, Jack Bates wrote:<BR>> According to
OpenID specification, indirect messages can be sent as a GET or as<BR>> a
POST. However the Python library doesn't support assertions which are sent
as<BR>> a POST - it only supports assertions which are sent as a GET.
Consequently the<BR>> Python library fails to interoperate with some OpenID
providers which<BR>> nonetheless conform to the OpenID specification<BR>>
<BR>> I opened this pull request to address this issue:<BR>>
https://github.com/openid/python-openid/pull/25<BR>>
_______________________________________________<BR>> Code mailing
list<BR>> Code@lists.openid.net<BR>>
http://lists.openid.net/mailman/listinfo/openid-code<BR>_______________________________________________<BR>Code
mailing
list<BR>Code@lists.openid.net<BR>http://lists.openid.net/mailman/listinfo/openid-code<BR></DIV>
<DIV><STRONG><FONT size=4></FONT></STRONG> </DIV></DIV></DIV></BODY></HTML>