[OpenID] Summarizing my grouse with XRD
John Bradley
ve7jtb at ve7jtb.com
Thu Oct 22 15:20:21 UTC 2009
We did consider templates, special URI etc.
They all add needless complexity.
If there is a Subject you use the Subject.
If there is no Subject you use whatever your processing rules define
as the subject.
Having a special subject that tells the processor to ignore it is more
confusing and doesn't add any security.
We spent a fair amount of time looking at the options.
Regards
John B.
On 2009-10-22, at 12:08 PM, SitG Admin wrote:
>> Also it would make sense to enforce the <Subject> on to the 1% who
>> would not require it, rather than leave the rest of the 99% to
>> their own interpretation of what you mean by 0 or 1 Subject.
>
> Couldn't there just be a wildcard (or reserved phrase) for "Do not
> interpret this subject literally."?
>
> -Shade
> _______________________________________________
> general mailing list
> general at lists.openid.net
> http://lists.openid.net/mailman/listinfo/openid-general
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2468 bytes
Desc: not available
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20091022/8145081b/attachment.bin>
More information about the general
mailing list