[OpenID] OpenID 2.1 Identifier Types --> WAS [Discovery for Email like identifiers]

Peter Williams pwilliams at rapattoni.com
Fri Jun 5 02:40:36 UTC 2009


Given the logic, should i guess now that google don't want the users to have op portability, and just "opted out" of that bit of discovery, intentionally breaking the delegation support in their op?

Im clearly the stupidest person here, and I even I could implement basic support for the hxri proxy!

But its interesting to see which bits of uci are unpalatable to large corporations.

2.1 will drop delegation and xri, is my prediction. Xri (and hxri) will go completely and supporting portability will be made optional.

Be interesting to see if yahoo gets the clumsy use of dh out of openid, so ssl can then do master secret protection and key derivation with cng (suite b).



________________________________
From: Chris Messina <chris.messina at gmail.com>
Sent: Thursday, June 04, 2009 6:59 PM
To: Peter Williams <pwilliams at rapattoni.com>
Cc: sappenin at gmail.com <sappenin at gmail.com>; Santosh Rajan <santrajan at gmail.com>; general at openid.net <general at openid.net>
Subject: Re: [OpenID] OpenID 2.1 Identifier Types --> WAS [Discovery for Email like identifiers]


On Thu, Jun 4, 2009 at 6:42 PM, Peter Williams <pwilliams at rapattoni.com<mailto:pwilliams at rapattoni.com>> wrote:
Facebook are non conforming - if they didn't allow for user's to use their hxris. Shame on them. Its not exactly hard.

Have you associated your Facebook account with an OpenID? Do you know anyone who has attempted to do so using an XRI?

Have you implemented support for XRI?

Facebook isn't the first major service that's talked to me that didn't add support for XRI. And to my knowledge, few if anyone ever really complained.

I think we need to look at OpenID and XRI in a much wider lens and remember that we need this technology to be adaptable by people who are not part of the identity community — and who have never heard of — or don't care — what XRI is, regardless of the value of the ideas behind it.


Using openid mechanisms to reimplement facebook connect (with variant messages) is a both a move forward and a move back. If openid is just a tech library rather than a movement for uci, im not sure it needs the overhead of the foundation.

It's both, but if parts of the technology are holding back adoption — or are not being adopted in the first place — then it's worth reconsidering what value they offer if they're never implemented or supported.

I would love to see Janrain list the percentage of XRI users they've seen across their RPX installations. I bet you it's less than 1% of 1%.

Chris

--
Chris Messina
Open Web Advocate

Website: http://factoryjoe.com
Blog: http://factoryjoe.com/blog
Twitter: http://twitter.com/chrismessina

Diso Project: http://diso-project.org
OpenID Foundation: http://openid.net

This email is:   [ ] bloggable    [X] ask first   [ ] private



More information about the general mailing list