[OpenID] OpenID Discovery for Email like identifiers - Draft 0.1
Santosh Rajan
santrajan at gmail.com
Tue Jun 2 18:44:57 UTC 2009
Dirk Balfanz wrote:
>
> In general, I don't think you need to "adapt" webfinger. Webfinger gives
> you
> everything you need.
>
Point Taken
> The OpenID community just needs to decide whether the
> email-like identifiers falling out of webfinger are acceptable OpenIDs.
>
I believe there is some traction on this matter. Why don't we put this up
for voting on the foundation?
> Couple of specific comments:
> - re signatures: I would just use whatever the XRI TC comes up with there
> for XRD signing.
>
Agreed
> - I don't think you should have the openid21.provider Rel-type with the
> URI.
> Since you start with an email(-like) identifier, it is clear that you're
> performing discovery on an identifier for a user, not for a host. So you
> should only look for a Link element that has a URITemplate in it. If you
> want to map all users to the same endpoint, just make it a template that
> doesn't actually have any unbound variables in it.
>
Since the "host-meta" may have other use cases, we cannot just rely on one
link having a URITemplate. I think we need to be explicit here.
> - "openid21.usermeta" should should be something generic like
> "describedby"
> - as you point out that's the user's _meta data_, not just OpenID stuff
> (although there was some discussion at IIW that "describedby" isn't
> appropriate b/c the email-like identifier isn't technically a URI, and
> URITemplates, and "describedby" are supposed to be for URIs - but I think
> that's a technicality we'll work out).
>
> - the openid21.local_id being its own Link seems weird to me. Why not
> something like this:
>
> <Link>
> <Rel>openid.provider</Rel>
> <URI>http://openidprovider.com/op</URI>
> <openid:LocalID xmlns:openid="http://...">some-local-id</openid:LocalID>
> </Link>
>
Again I think it is better that it remains as separate link. This has more
to do with the design of XRD vis-avis XRDS.
-----
Santosh Rajan
http://santrajan.blogspot.com http://santrajan.blogspot.com
--
View this message in context: http://www.nabble.com/OpenID-Discovery-for-Email-like-identifiers---Draft-0.1-tp23832524p23838393.html
Sent from the OpenID - General mailing list archive at Nabble.com.
More information about the general
mailing list