[OpenID] UTF-8 processing

Tan, William William.Tan at neustar.biz
Wed Apr 11 17:29:50 UTC 2007


Hi,

In openid-authentication-2_0-11 section 4.1, it says:

"The keys and values permit the full Unicode character set (UCS). When 
the keys and values need to be converted to/from bytes, they MUST be 
encoded using UTF-8 [RFC3629]."

May I suggest to clarify it so that it reads:

"The keys and values permit the full Unicode character set (UCS). When 
the keys and values need to be converted to/from bytes, they MUST first 
be represented in the UTF-8 [RFC3629] and then percent encoded [RFC3986]."


It may be necessary to further clarify the rules within certain openid 
parameters that could be internationalized. For example, we may only 
want to allow URIs (rather than IRIs) as openid.ns values. For 
openid.contact and openid.error, it will need to be UTF-8 and then 
percent encoded. Some protocol elements such as openid.mode should 
probably be restricted to [0-9a-zA-Z_].

Thoughts?

=wil




More information about the general mailing list