[OpenID] Making sure OpenID works (was: Starting new OpenID Workgroups)
SitG Admin
sysadmin at shadowsinthegarden.com
Thu Oct 16 05:33:25 UTC 2008
>Traditionally, what people have done is defined interoperability
>test suites, required that all vendors pass the test suites, and
>made the use of the brand (here: the OpenID logo) dependent on
>passing the test suites.
>
>So far, we have not done this in OpenID.
>
>Do we need to?
I think test suites (assuming, here, that you mean "3rd-party sites
will try to interact with your implementation and diagnose the
problem") help with people who are already working on it, but we
should also look at assisting beginning developers with understanding
the process - not just those who already have reason to work on it
(because they're interested, or they've been paid), but those who are
trying to figure out how OpenID *works*. Increased transparency in at
least one library, even an example library constructed specifically
for that purpose (as an "ideal flow" for OpenID), would help there.
Instead of just saying "We're open-source, look at it!" (which
requires some level of time and thought investment into reading and
understanding our source) and pointing at the specs and some
higher-level flow descriptions, let's bring developers as close as we
can to the actual operation: the equivalent of setting PHP's
error-reporting level to ALL, where they constantly see information
printed about each stage of the process they're on and what's going
on overall (where variables are having their values stored for later
use, where they can be effectively discarded).
-Shade
More information about the general
mailing list