[OpenID] SREG 1.x attributes

Shane B Weeden sweeden at au1.ibm.com
Sat Nov 29 09:39:50 UTC 2008


Can anyone explain why the SREG 1.x specifications state:

A single field MUST NOT be repeated in the response, and all included 
fields MUST be taken from the set of fields defined in this specification.

In particular I can't see the reasoning behind the "all included fields 
MUST be taken from the set of fields defined in this specification". Why 
not allow the set of attributes to be extended arbitrarily if parties so 
desire, e.g. 

openid.sreg.hertz.goldnumber

Now that's just an example, but I see no reason for the specification to 
dictate the set of allowable attributes when it's quite a simple matter to 
make it extensible. I realize that efforts are made to define a common 
schema, and that's great, but the spec shouldn't limit itself to that 
schema. 

I would like to see that considered before SREG 1.1 goes to finalized. 

Regards,
Shane.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20081129/01926c4a/attachment-0002.htm>


More information about the general mailing list