[OpenID] OpenID Discovery for Email like identifiers - Draft 0.1

Santosh Rajan santrajan at gmail.com
Tue Jun 2 18:44:57 UTC 2009




Dirk Balfanz wrote:
> 
> In general, I don't think you need to "adapt" webfinger. Webfinger gives
> you
> everything you need. 
> 

Point Taken



> The OpenID community just needs to decide whether the
> email-like identifiers falling out of webfinger are acceptable OpenIDs.
> 

I believe there is some traction on this matter. Why don't we put this up
for voting on the foundation? 



> Couple of specific comments:
> - re signatures: I would just use whatever the XRI TC comes up with there
> for XRD signing.
> 

Agreed



> - I don't think you should have the openid21.provider Rel-type with the
> URI.
> Since you start with an email(-like) identifier, it is clear that you're
> performing discovery on an identifier for a user, not for a host. So you
> should only look for a Link element that has a URITemplate in it. If you
> want to map all users to the same endpoint, just make it a template that
> doesn't actually have any unbound variables in it.
> 

Since the "host-meta" may have other use cases, we cannot just rely on one
link having a URITemplate. I think we need to be explicit here.



> - "openid21.usermeta" should should be something generic like
> "describedby"
>  - as you point out that's the user's _meta data_, not just OpenID stuff
> (although there was some discussion at IIW that "describedby" isn't
> appropriate b/c the email-like identifier isn't technically a URI, and
> URITemplates, and "describedby" are supposed to be for URIs - but I think
> that's a technicality we'll work out).
> 



> - the openid21.local_id being its own Link seems weird to me. Why not
> something like this:
> 
> <Link>
>   <Rel>openid.provider</Rel>
>   <URI>http://openidprovider.com/op</URI>
>   <openid:LocalID xmlns:openid="http://...">some-local-id</openid:LocalID>
> </Link>
> 

Again I think it is better that it remains as separate link. This has more
to do with the design of XRD vis-avis XRDS.


-----

Santosh Rajan
http://santrajan.blogspot.com http://santrajan.blogspot.com 
-- 
View this message in context: http://www.nabble.com/OpenID-Discovery-for-Email-like-identifiers---Draft-0.1-tp23832524p23838393.html
Sent from the OpenID - General mailing list archive at Nabble.com.




More information about the general mailing list