[OpenID] Recycling OpenIDs (Was: What's broken in OpenID 2.0?(IIW session))

Chasen, Les les.chasen at neustar.biz
Mon May 14 03:06:47 UTC 2007



> -----Original Message-----
> From: general-bounces at openid.net [mailto:general-bounces at openid.net]
On
> Behalf Of Dick Hardt
> Sent: Sunday, May 13, 2007 10:22 PM
> To: rajeev
> Cc: general at openid.net
> Subject: Re: [OpenID] Recycling OpenIDs (Was: What's broken in OpenID
> 2.0?(IIW session))
> 
> 

[Chasen, Les] SNIP .....

> 
> XRI does have something to offer, but also has what I consider a
> number of disadvantages:
> 
> + I can click on a URL in a browser and it opens a web page. I can't
> do that with an XRI today.
[Chasen, Les] Not true.  XRIs are URIs.  Yes you need to be able to
resolve them and there are not many resovlers deployed yet.  You can use
the global proxy resolver at xri.net.  http://xri.net/=les is a
perfectly clickable xri.  Local resolvers are beginning to pop up using
the openXRI code base.  Openid4java is a nice example.  There is also a
firefox plugin written by http://xri.net/=wil. 

I would also add that in my opinion knowing that an XRI is an identity
is a big plus.  With a URL you cannot really tell if it is an openid or
just a web page.

> 
> + Anyone with a domain name can create as many OpenIDs as they want
[Chasen, Les] The same is true with an XRI.

> 
> + i-names cost real money. Many people and organizations already have
> everything they need to have an OpenID.
[Chasen, Les] XRI's have the same exact cost structure as OpenId's.  If
you don't want to lay out money for an i-name from the GRS then you can
either run your own or get one from one of the sites providing free
names.  For example check out www.freexri.com (unfortunately he seems to
be down) or http://xrid.net.

> 
> + I-names introduce a brand new directory and infrastructure.
[Chasen, Les] Yes that is true but some would say that a dedicated
identity layer is worth it.

> 
> + how you prove that *you* are the one that controls the i-number is
> a critical point of failure
[Chasen, Les] How so?  How do you prove you are the owner of a URL?

> 
> I am reluctant to point out the issues with XRIs. I am biased against
> them and don't think they add much vale, *but* I am willing to let
> the market decide and be proven wrong. Per my proposal, I think we
> can provide similar value with URLs.
[Chasen, Les] Reluctant to a point :)  Yes the market will decide.

> 
> 
> 
> _______________________________________________
> general mailing list
> general at openid.net
> http://openid.net/mailman/listinfo/general



More information about the general mailing list