[OpenID] Opt out of Yahoo OpenID?

[Peter Williams]

We cannot say that this is not openid (the use of a uri element that could be ciphertext). I assume it has the same purpose as the pseudonym name format in the saml standard. What we should perhaps question is whether openid is deficient in its use-case work given it did not standardize what yahoo felt compelled to add

-----Original Message-----
From: sknvn-openid at yahoo.com <sknvn-openid at yahoo.com>
Sent: Friday, January 18, 2008 1:06 PM
To: Hans Granqvist <hans at granqvist.com>
Cc: openid-general <general at openid.net>
Subject: Re: [OpenID] Opt out of Yahoo OpenID?

Hi Hans,

During setup users will have the option to select a flickr photos URL (www.flickr.com/photos/naveen )or one like (me.yahoo.com/naveen) in addition to the auto generated one (me.yahoo.com/a/E(stuff) ). The user will be able to select the url while signing into an RP. 
Clearly We are not going to provide an API to decode the auto generated ID but an RP can distinguish the two URLs (encrypted and non encrypted ones by /a path) if that is what you were asking for.

Thanks

Naveen

----- Original Message ----
From: Hans Granqvist <hans at granqvist.com>
To: "sknvn-openid at yahoo.com" <sknvn-openid at yahoo.com>
Cc: Art Vandelay <artvandelay at usa.com>; openid-general <general at openid.net>
Sent: Friday, January 18, 2008 11:42:26 AM
Subject: Re: [OpenID] Opt out of Yahoo OpenID?


On 
1/18/08, 
sknvn-openid at yahoo.com 
<sknvn-openid at yahoo.com> 
wrote:
> 
By 
default 
only 
an 
encrypted 
identifier 
(e.g.
> 
https://me.yahoo.com/a/D.GGRt8BtuO56ICRqYtp287qNA) 
will 
be
> 
shared 
with 
the 
RP.

Naveen,

Is 
it 
correct 
to 
assume 
an 
RPs 
will 
not 
be 
able 
to 
associate 
a 
meaningful
ID 
for 
a 
Alice 
coming 
from 
Yahoo! 
unless 
she 
previously 
opts-in 
to
sharing 
her 
Yahoo! 
username?

Is 
there 
a 
Yahoo! 
API 
for 
a 
RP 
to 
check 
wether 
the 
identity 
is 
real 
or
encrypted?

Hans