[OpenID] Google discovery prototype: host-meta from Google

SitG Admin sysadmin at shadowsinthegarden.com
Wed Jul 15 14:56:52 UTC 2009


>I would like to understand which aspects can be changed to make it 
>viable, without crippling adoption.
>Changes that could be sufficient include:
>1. Removing 3rd-party URIs for a domain's host-meta file; or
>2. Removing the <openid:URITemplate> element; or
>3. Removing 3rd-party XRDS signers.

4. Requiring participating RP's to check with DNS to confirm that 
Google is hosting the site in question?

I'd assumed that RP's would so as much, as basic security/verification.

-Shade



More information about the general mailing list