[OpenID] Google OpenID IDP is now live

Ben Laurie benl at google.com
Thu Nov 6 16:58:32 UTC 2008


On Thu, Nov 6, 2008 at 4:44 PM, SitG Admin
<sysadmin at shadowsinthegarden.com> wrote:
>>>>  Are you suggesting that Google would serve an opaque ID in the user's
>>>>  domain?
>>>
>>>  sure, why not?
>>
>> Well, no particular problem serving one, but migrating it seems a bit
>> more problematic.
>
> Migrating opaque (RP-unique) ID's is exactly the same process as for two
> entirely different OpenID's: they can't be associated automatically, but the
> user can authenticate to a RP with both of them in succession.

That is not the migration in question: the migration is when the
domain owner wants to change OPs.

>
> Would sites that host OpenID's *and* OP's, together, be able to accept a
> compressed multi-discovery request? Something like "Okay the user claims to
> be these 30 different (old) opaque ID's, and we don't want to perform
> discovery 30 times, so here are the claims and can you just verify them for
> us please? Thanks."
>
> -Shade
>



More information about the general mailing list