[OpenID] Google OpenID IDP is now live
Ben Laurie
benl at google.com
Thu Nov 6 16:58:32 UTC 2008
On Thu, Nov 6, 2008 at 4:44 PM, SitG Admin
<sysadmin at shadowsinthegarden.com> wrote:
>>>> Are you suggesting that Google would serve an opaque ID in the user's
>>>> domain?
>>>
>>> sure, why not?
>>
>> Well, no particular problem serving one, but migrating it seems a bit
>> more problematic.
>
> Migrating opaque (RP-unique) ID's is exactly the same process as for two
> entirely different OpenID's: they can't be associated automatically, but the
> user can authenticate to a RP with both of them in succession.
That is not the migration in question: the migration is when the
domain owner wants to change OPs.
>
> Would sites that host OpenID's *and* OP's, together, be able to accept a
> compressed multi-discovery request? Something like "Okay the user claims to
> be these 30 different (old) opaque ID's, and we don't want to perform
> discovery 30 times, so here are the claims and can you just verify them for
> us please? Thanks."
>
> -Shade
>
More information about the general
mailing list