[OpenID] Google discovery prototype: host-meta from Google
SitG Admin
sysadmin at shadowsinthegarden.com
Wed Jul 15 14:56:52 UTC 2009
>I would like to understand which aspects can be changed to make it
>viable, without crippling adoption.
>Changes that could be sufficient include:
>1. Removing 3rd-party URIs for a domain's host-meta file; or
>2. Removing the <openid:URITemplate> element; or
>3. Removing 3rd-party XRDS signers.
4. Requiring participating RP's to check with DNS to confirm that
Google is hosting the site in question?
I'd assumed that RP's would so as much, as basic security/verification.
-Shade
More information about the general
mailing list