[OpenID] Why use SREG instead of AX?

[Allen Tom]

We'd have to revise the AX spec to support he privacy policy url. The 
Yahoo OP is currently testing the SREG extension, and our lawyers really 
like how we're able to link to the RP's privacy policy. It was very 
unfortunate that this feature was omitted in AX.

Moving forward, it probably makes more sense to make the RP's privacy 
policy discoverable, rather than putting into AX.

In either case, either the AX or Discovery spec has to be updated, and 
there's a pretty big overhead to spinning up a new working group to do 
this. A very expedient "hack" would be to put it into the UI Extension, 
since the UI Extension is currently a work in progress, but there's not 
all that much consensus to do this.

Allen


David Fuelling wrote:
> On Fri, Jul 10, 2009 at 2:42 PM, Andrew Arnott <andrewarnott at gmail.com 
> <mailto:andrewarnott at gmail.com>> wrote:
>
>     There is actually one feature sreg has that AX doesn't: privacy
>     policy URL of the RP.  
>
>
> Why can't AX support a privacy policy URL?  Is it a matter of not 
> having a commonly agreed upon attribute type-name?
> ------------------------------------------------------------------------
>
> _______________________________________________
> general mailing list
> general at openid.net
> http://openid.net/mailman/listinfo/general
>   

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20090710/9da1270d/attachment.htm>