[OpenID] Google discovery prototype: host-meta from Google

Breno de Medeiros breno at google.com
Wed Jul 15 18:08:19 UTC 2009


All of these changes would break adoption and neither is necessary to
resolve trust issues.

On Wed, Jul 15, 2009 at 7:56 AM, SitG Admin <sysadmin at shadowsinthegarden.com
> wrote:

> 1. Removing 3rd-party URIs for a domain's host-meta file; or
>
>
This could be safely done with signed delegation


>
>> 2. Removing the <openid:URITemplate> element; or
>
>
This enables delegation


>
>> 3. Removing 3rd-party XRDS signers.
>
>
This can be safely done through delegation (the first signature needs to be
trusted by the RP to be authoritative for the domain in question).


-- 
--Breno

+1 (650) 214-1007 desk
+1 (408) 212-0135 (Grand Central)
MTV-41-3 : 383-A
PST (GMT-8) / PDT(GMT-7)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20090715/9d9bd48e/attachment.htm>


More information about the general mailing list