[OpenID] The delegation story in OpenID 2.0

Johnny Bufu johnny at sxip.com
Thu Jan 18 23:07:42 UTC 2007

On 18-Jan-07, at 2:49 PM, Dmitry Shechtman wrote:

> Johnny Bufu wrote?
>> The term is "OP-Local Identifiers" and the HTML tags are:
>> openid2.provider
>> openid2.local_id
> Is this a joke? Are there going to be separate servers for 1.1 and  
> 2.0?

No joke; different tags were used so that the RP can determine the  
version of the protocol supported by an OP when it performs discovery  
on an identifier.

You can use both the v1 and v2 tags to point your URL Identifier to  
the same server (if it implements both v1 and v2 protocols). This is  
the example in the spec:

> <link rel="openid2.provider openid.server"
>       href="http://www.livejournal.com/openid/server.bml"/>
> <link rel="openid2.local_id openid.delegate"
>       href="http://exampleuser.livejournal.com/"/>

And this the related note for Relying Parties in the compatibility  

> [...] HTML allows multiple link relationships to be specified for a  
> single link, so if an OP provides both OpenID Authentication 1.1  
> and OpenID Authentication 2.0, "openid2.provider" and  
> "openid.server" may appear in the same "rel" attribute.


More information about the general mailing list