[OpenID] blogspot and google as OPs; synonyms

[John Panzer]

To clarify something:  The OP used for Blogger blogs is openid2.blogspot.com,
is used on custom domains as well as *.blogspot.com.  It's separate (today)
from the OP used for a generic Google account.  It's also a separate
identity from the owner's identity; it has to be, because a given Google
account can own many blogs, and each blog URL is its own OpenID.  Obviously
there is an ownership relationship behind the scenes here.

Note that a Blogger user can also insert the OpenID meta tags in their
template to choose a different OP, shoudl they wish to do so.


On Sun, Jun 7, 2009 at 7:08 PM, Peter Williams <pwilliams at rapattoni.com>wrote:

> ok im officially confused.
>
> do something obvious peter, like login to gmail. Great! It works.
> Gmail/Google is also an OP, doing directed id. It works, Ive found when
> talking to plaxo.
>
> peter happens to wander to blogspot.com. Without my involvement, Im logged
> in to my blogspot account. Some kind of auto-SSO between google and blogspot
> has happened, Ill assume. Lets assume its proprietary, and not openid.
>
>
> blogspot is an OP, and tells me to use http://openid2.blogspot.com/ as my
> openid. So I do.
>
> Plaxo accepts that openid, and no login experience at the OP is provided;
> ill assume my google credentials are being applied somehow at blogspot.com,
> possibly leeraging a "google accounts" session. Any, blogspot releases an
> assertion between blogspot.com and plaxo.com. Im not sure whether sreg is
> used, as if google profile AX alues are applied, or blogspot profile values
> are applied.
>
> Earlier, plaxo accepted the Google OP too - and bound it to my plaxo
> account.
>
> Do I now have two openids provisioned by one OP (operated as different
> domain names)?
> Do I now have two openids provisioned by two OPs?
>
> are the openid's synonyms? Are their lifecycles synced? i.e. destruction of
> one leads to destruction of the other?
>
> If I unbind one from plaxo, is the protocol supposed to unbind the other
> too (since plaxo may be supposed to know that they are synonyms)?
>
> are these the kind of problems that XRI was supposed to solve? - so RPs
> could use the metadata to act "intelligently" when faced with openid
> synonyms?
>
> Is the idea that - should blogspot be be sold off and become unconnected
> with Google Accounts, my blogspot openid may one day no longer be a synonym,
> and plaxo would then know no longer to unbind me from the gmail openid
> (merely because I opt to unbind my plaxo account from blogspot)?
>
>
>
>
>
> _______________________________________________
> general mailing list
> general at openid.net
> http://openid.net/mailman/listinfo/general
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20090609/1c616503/attachment.htm>