[OpenID] OpenID Uri versus Email addresses

Rabbit rabbit at cyberpunkrock.com
Thu Aug 7 15:44:04 UTC 2008


On Aug 5, 2008, at 6:12 AM, tom wrote:

> OpenID Uri versus Email addresses -> Oh no I hear you cringe; not that
> old discussion again;)


Why not just use XRDS?

If the e-mail address is "rabbit at example.com" the XRDS for http://example.com/ 
  would be requested. Would be trivial to create a namespace for an e- 
mail to uri service that receives an e-mail and responds with a uri or  
failure. This would also allow example.com to implement their own  
logic for unforeseeable transformations such as:

if ($email == 'vp at example.com') { $uri = 'http://bob.example.com/'; }

The downside to this is the route to your OpenID URI is potentially  
controlled by someone else but I think everyone knows that aspect is  
true of all e-mails anyway.


=Rabbit



More information about the general mailing list