[OpenID] SREG 1.x attributes

Peter Williams pwilliams at rapattoni.com
Tue Dec 2 02:41:42 UTC 2008



-----Original Message-----
From: general-bounces at openid.net [mailto:general-bounces at openid.net] On Behalf Of Dick Hardt
Sent: Monday, December 01, 2008 4:57 PM
To: Martin Atkins
Cc: general at openid.net
Subject: Re: [OpenID] SREG 1.x attributes


On 1-Dec-08, at 4:37 PM, Martin Atkins wrote:

> Peter Williams wrote:
>> Here is a compromise: make it clear that both solicited and
>> unsolicited responses to an auth can bear a ax etension ...
>> alongside the sreg).
>>
>> Ax comes across as: ask for auth, get assertion (with sreg), now go
>> back and ask for ax, get ax response (over association keys).
>>
>
> Is that really what the AX spec describes? That was not my
> interpretation when I read it, but then I may have been reading it
> with
> SREG-tinted glasses.
>
> If the AX spec really is suggesting that the attributes be exchanged
> in
> a separate transaction, then we should totally fix that. AX is
> supposed
> to be a superset of the functionality of SREG.

AX works as you think it works Martin.

Peter's comments are confusing to me.

-- Dick
_______________________________________________
general mailing list
general at openid.net
http://openid.net/mailman/listinfo/general



More information about the general mailing list