[OpenID] Yahoo doesn't return openid.mode=cancel responses?

[David Recordon]

I'd have to defer to someone from Yahoo!, but I don't think you're  
doing something wrong nor is Yahoo! violating the spec.  While they  
can send a cancel response to the RP, they seem to be choosing to send  
the user back to "a safe place" instead.

--David

On Nov 12, 2008, at 1:44 PM, Deron Meranda wrote:

> I'm seeing something unexpected with using Yahoo! as an OP.
>
> If, once I get on Yahoo!'s OpenID authorization page I click
> "cancel" rather than "continue"; it redirects my browser to the
> Yahoo! public home page at http://www.yahoo.com/ -- rather
> than going back to the RP's return_to URL with an openid.mode
> of "cancel".
>
> Other OP's I'm testing with seem to work as expected; they
> return a cancel message back to my RP.
>
> Am I potentially doing something wrong, or is Yahoo! not
> following the OpenID spec here?
> -- 
> Deron Meranda
> _______________________________________________
> general mailing list
> general at openid.net
> http://openid.net/mailman/listinfo/general