[OpenID] [LIKELY_SPAM]Re: Combining Google & Yahoo user experience research

[SitG Admin]

>If an RP can host an input that allows me to just type 
>home_pw at msn.com, and that gets converted into 
>http(s)://home_pw at msn.com intending said identifier to invoke law#4 
>at some discovery endpoint determined by the RP (with little or no 
>relationship to msn.com),

What if the mail is hosted at 'mail.msn.com', to keep the domain name 
in your example? Would we end up with OpenID sub-domains?

-Shade