[OpenID] URL normalization and capitalization

SitG Admin sysadmin at shadowsinthegarden.com
Tue Aug 5 00:52:40 UTC 2008


Do the specs currently forbid RP's from differentiating between URI's 
based on capitalization? If not, I'd like to propose that they do, 
for two reasons;

1) Flexibility of implementation: not having to avoid a particular 
(favored/usual) programming method catering to the limitations of the 
platform or (database) software.

2) Certainty of identity; not letting NorMalUser into NormalUser's 
account when their Identity-hosting site doesn't see them as 
conflicting, and being able to recognize ShadowsInTheGarden.com as 
the same user as shadowsinthegarden.com by translating the string to 
all upper (or lower) caps for comparison :)

-Shade



More information about the general mailing list