<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
What do you mean by "vhosts"? Something like user.domain.com? In which
case a wild card certificate would do the trick...but also
domain.com/user is a valid approach for openid.<br>
<br>
Cameron King wrote:
<blockquote cite="mid:4789117F.2030701@uniquekings.com" type="cite">I'm
coming into this game late, but with a heavy interest and high hopes -
so please correct me if I say something that's too far off in left
field.
<br>
<br>
My only real concern with having https be the default protocol for
OpenIDs is that vhosted sites who want to delegate become more
complicated - probably requiring a plan upgrade just for that SSL and
dedicated IP. We can't easily "autodetect" either without causing
spoofing issues on vhosts.
<br>
<br>
If all RP's accept https addresses when fully specified though, you
might be able to get that end-to-end encryption for yourself without
causing problems for vhosts.
<br>
<br>
<br>
Eddy Nigg (StartCom Ltd.) wrote:
<br>
<blockquote type="cite">Well, I suggested that more than a year ago
just to get booed down...it
<br>
really should be part of the policy
<br>
<br>
Sean Reilly wrote:
<br>
<blockquote type="cite"><br>
I think the point is that OpenIDs should start with https: so that
<br>
there is no http->https redirection needed. If any step of the
<br>
process goes through a normal http exchange/redirect then there is a
<br>
weak link in the chain where a bad guy could take over the
<br>
authentication.
<br>
</blockquote>
</blockquote>
<br>
</blockquote>
<br>
<div class="moz-signature">-- <br>
<table border="0" cellpadding="0" cellspacing="0">
<tbody>
<tr>
<td colspan="2">Regards </td>
</tr>
<tr>
<td colspan="2"> </td>
</tr>
<tr>
<td>Signer: </td>
<td>Eddy Nigg, <a href="http://www.startcom.org">StartCom Ltd.</a></td>
</tr>
<tr>
<td>Jabber: </td>
<td><a href="xmpp:startcom@startcom.org">startcom@startcom.org</a></td>
</tr>
<tr>
<td>Blog: </td>
<td><a href="http://blog.startcom.org">Join the Revolution!</a></td>
</tr>
<tr>
<td>Phone: </td>
<td>+1.213.341.0390</td>
</tr>
<tr>
<td colspan="2"> </td>
</tr>
</tbody>
</table>
</div>
</body>
</html>