[OpenID] Reconsidering http://openid different from https://openid

Johnny Bufu johnny at sxip.com
Mon Sep 24 17:37:06 UTC 2007


On 24-Sep-07, at 3:12 AM, Stephane Bortzmeyer wrote:

> On Thu, Sep 20, 2007 at 03:55:14PM -0700,
>  Paul C. Bryan <email at pbryan.net> wrote
>  a message of 59 lines which said:
>
>> OpenID is built on the HTTP(s) protocol,
>
> Checking the specification, it does not seem so. The specification
> apparently only says that the identifier has to be resolvable (an URL,
> not just any URI), which includes ftp:// URLs (and gopher:// :-)

No:

"2.  Terminology

Identifier:
An Identifier is either a "http" or "https" URI, (commonly referred  
to as a "URL" within this document), or an XRI [XRI_Syntax_2.0]. This  
document defines various kinds of Identifiers, designed for use in  
different contexts."

http://openid.net/specs/openid-authentication-2_0-12.html


Johnny






More information about the general mailing list