[OpenID] query regarding OP migration

Nate Klingenstein ndk at internet2.edu
Fri May 30 21:35:06 UTC 2008


Peter,

There's no need to assume malicious action on the part of the OP  
here, because there are other issues with stale data.  As two  
examples, RP's encounter multiple identities for users with no  
obvious way to tell which is the right one, which results in  
difficulties picking the right user in a variety of contexts and  
identity reconciliation problems, and an old account can be  
incorrectly associated with a new user(why fragments are included in  
the specification and some implementations).  It's nice to keep  
identity databases clean.

After all, isn't a "single digital identity" one of OpenID's goals,  
written in bright orange letters on the front page? :D
Nate.

On 30 May 2008, at 21:12, Peter Williams wrote:

> Why does one really need to de-register in openid - a law#1  
> mandatory consent policy context? The assumption is that you have  
> several op provisioned with your attributes - and I all cases you  
> choose which one to allow to release your data. If they are not  
> abiding by law1, they cannot be presumed to deregister you either.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20080530/400a7d86/attachment-0002.htm>


More information about the general mailing list