[OpenID] Reconsidering http://openid different from https://openid

[Jonathan Daugherty]

# > I believe that HTTP is permitted only because some webserver
# > software might not have the requisite libraries.
# 
# I think it's because HTTP is easy and cheap, and HTTPS is hard(er)
# to setup, and more resource-intensive (on IP addresses, CPU, $$$).

And because in practice the number of servers that lack SSL support is
far more than "some."  There are many RPs in the wild that simply
cannot consume HTTPS identifiers.

-- 
  Jonathan Daugherty
  JanRain, Inc.
  irc.freenode.net: cygnus in #openid
  cygnus.myopenid.com