[OpenID] Weighing In on TechCrunch's "Is OpenID Being Exploited By The Big Internet Companies?"

[Johnny Bufu]

On 24-Mar-08, at 4:16 PM, Peter Williams wrote:

> At https://verify.sxip.com/email/auth/request  @blog*lockbox  
> doesn't resolve.
>
> Can you move the site up to OpenID2 compliance?

It actually is; the error that I see in the logs (which should be  
better exposed in the interface) is "ProviderID is not authoritative  
for the CanonicalID".

OpenID4Java performs this (quite important) verification step, while  
the underlying openxri library and xri.net were not (at least the  
last time I talked to the people in charge there).


Johnny