[OpenID] is it true?

[Peter Williams]

User types "@blog*lockbox" at RP

Discovery determines that XRD.canonicalid is !1234, and the XRD.SEP has local-id=homepw.myopenid.com

This form of SEP implies that the user desires openid2-style openid-delegation

On receiving a request in which cid=!1234 and identifier=homepw.myopenid.com, the OP ONLY responds IF it does a discovery on !1234, validates that cid-verification=true (and sees that there exists SEP.local-id == request.openid.identity).

Is it true that the OP does NOT know that the user typed @blog*lockbox at the RP?






-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20090825/19336e98/attachment.htm>