<html>
<head>
<style>
P
{
margin:0px;
padding:0px
}
body
{
FONT-SIZE: 10pt;
FONT-FAMILY:Tahoma
}
</style>
</head>
<body>A cert per username sounds like a good option to have - especially as the concept moves forward. A wildcard to cover everyone else but those who have their own certificates - businesses and high end users may have good reasons for this.<BR>
Most providers won't worry too much about the cost of a wildcard cert i would have thought.<BR>
<BR>
I have used user.domain.org , but one issue is making sure certain characters are not used in the username (such as periods and spaces) which can screw up the logic.<BR>
<BR>
steven<BR>
<A href="http://livz.org">http://livz.org</A><BR><BR><BR><BR><BR>
<BLOCKQUOTE>
<HR id=EC_stopSpelling>
Date: Tue, 31 Jul 2007 20:33:46 -0700<BR>From: Andrew.Patterson@Sun.COM<BR>To: Mark.Wahl@informed-control.com<BR>CC: general@openid.net<BR>Subject: Re: [OpenID] identity url suggested formats?<BR><BR>
<META content="Microsoft SafeHTML" name=Generator>Also, HTTPS is easier and cheaper with <A class=EC_moz-txt-link-freetext href="https://op.com/username" target=_blank>https://op.com/username</A> than <A class=EC_moz-txt-link-freetext href="https://username.op.com/" target=_blank>https://username.op.com</A>. The former case needs one SSL server cert to cover the entire user population; the latter requires a wildcard cert (iirc, more expensive than a single server cert) or a cert per username.<BR><BR>Cheers,<BR><BR>Pat<BR><BR>Mark Wahl wrote:
<BLOCKQUOTE cite=mid:46AFF879.60204@informed-control.com><PRE>Jamie McClelland wrote:
</PRE>
<BLOCKQUOTE><PRE>Any suggestions would be welcome (including a link to RTFM :).
</PRE></BLOCKQUOTE><PRE>Coincidentally I mentioned some of the differences in constraints
in equality matching and encoding of OpenID URIs containing a userid
in the host versus those containing a userid in the path, in a recent
blog post "Issues with internationalizing domain names",
<A class=EC_moz-txt-link-freetext href="http://www.ldap.com/1/commentary/wahl/20070729_01.shtml" target=_blank>http://www.ldap.com/1/commentary/wahl/20070729_01.shtml</A>
Mark Wahl
Informed Control Inc.
_______________________________________________
general mailing list
<A class=EC_moz-txt-link-abbreviated href="mailto:general@openid.net">general@openid.net</A>
<A class=EC_moz-txt-link-freetext href="http://openid.net/mailman/listinfo/general" target=_blank>http://openid.net/mailman/listinfo/general</A>
</PRE></BLOCKQUOTE><PRE class=EC_moz-signature>--
Pat Patterson - <A class=EC_moz-txt-link-abbreviated href="mailto:pat.patterson@sun.com">pat.patterson@sun.com</A>
Federation Architect,
Sun Microsystems, Inc.
<A class=EC_moz-txt-link-freetext href="http://blogs.sun.com/superpat" target=_blank>http://blogs.sun.com/superpat</A>
</PRE></BLOCKQUOTE><br /><hr />Don't get caught with egg on your face. <a href='http://club.live.com/chicktionary.aspx?icid=chick_wlmailtextlink' target='_new'>Play Chicktionary! </a></body>
</html>