<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">
<br><div><div>On 18-Jan-08, at 4:28 PM, <a href="mailto:sknvn-openid@yahoo.com">sknvn-openid@yahoo.com</a> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div style="font-family:times new roman, new york, times, serif;font-size:12pt"><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;">Hi Simon,<br><br>No. The auto generated URL will remain the same (for all RPs) for a user. <br>We are using the "directed identity" feature to make it easier for a user to sign in. The user only has to type in "yahoo.com" or click on a <a href="http://developer.yahoo.com/openid/loginbuttons.html">button </a> that RP adds to his/her site and we'll send the right url identifier back after authentication.<br></div></div></blockquote></div><br><div>If it is the same URL for all users, then it is not directed identity. What you have done is generated a "random" URL for them to use so that the Yahoo OpenID is not linked to their Yahoo account (unlike the AOL OpenIDs).</div><div><br class="webkit-block-placeholder"></div><div>Directed identity is what Sxipper does where a different URL is provided for each RP. Cardspace follows a similar pattern with the self managed cards.</div><div><br class="webkit-block-placeholder"></div><div>This does not need to be added to the specification as it was anticipated and the management is out of band of the protocol.</div><div><br class="webkit-block-placeholder"></div><div>-- Dick</div><div><br class="webkit-block-placeholder"></div><div><br class="webkit-block-placeholder"></div></body></html>