[OpenID] blogspot and google as OPs; synonyms
Peter Williams
pwilliams at rapattoni.com
Mon Jun 8 02:08:33 UTC 2009
ok im officially confused.
do something obvious peter, like login to gmail. Great! It works. Gmail/Google is also an OP, doing directed id. It works, Ive found when talking to plaxo.
peter happens to wander to blogspot.com. Without my involvement, Im logged in to my blogspot account. Some kind of auto-SSO between google and blogspot has happened, Ill assume. Lets assume its proprietary, and not openid.
blogspot is an OP, and tells me to use http://openid2.blogspot.com/ as my openid. So I do.
Plaxo accepts that openid, and no login experience at the OP is provided; ill assume my google credentials are being applied somehow at blogspot.com, possibly leeraging a "google accounts" session. Any, blogspot releases an assertion between blogspot.com and plaxo.com. Im not sure whether sreg is used, as if google profile AX alues are applied, or blogspot profile values are applied.
Earlier, plaxo accepted the Google OP too - and bound it to my plaxo account.
Do I now have two openids provisioned by one OP (operated as different domain names)?
Do I now have two openids provisioned by two OPs?
are the openid's synonyms? Are their lifecycles synced? i.e. destruction of one leads to destruction of the other?
If I unbind one from plaxo, is the protocol supposed to unbind the other too (since plaxo may be supposed to know that they are synonyms)?
are these the kind of problems that XRI was supposed to solve? - so RPs could use the metadata to act "intelligently" when faced with openid synonyms?
Is the idea that - should blogspot be be sold off and become unconnected with Google Accounts, my blogspot openid may one day no longer be a synonym, and plaxo would then know no longer to unbind me from the gmail openid (merely because I opt to unbind my plaxo account from blogspot)?
More information about the general
mailing list