<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Brendan Taylor:
<blockquote
cite="mid:20080308033842.GV2918@nyarlathotep.necronomicorp.com"
type="cite">
<pre wrap=""><!---->
My understanding is that yes, the OP can return something completely
different—if the user entered an OP Identifier.
</pre>
</blockquote>
No, it can return a claimed_id unrelated to the user input. Including
but not limited to OP URL input.<br>
<blockquote
cite="mid:20080308033842.GV2918@nyarlathotep.necronomicorp.com"
type="cite">
<pre wrap="">
If the user did not enter an OP Identifier, then the Claimed Identifier
is determined by the normalization procedure specified in OpenID
Authentication 2.0 §7.2, which is what we're discussing.
</pre>
</blockquote>
Right, until it gets to the OP...<br>
<blockquote
cite="mid:20080308033842.GV2918@nyarlathotep.necronomicorp.com"
type="cite">
<pre wrap="">
</pre>
<blockquote type="cite">
<pre wrap="">It's the job of the OP to know what he's doing with each redirect and not
lose the information he is required to know in order to successfully
authenticate.
</pre>
</blockquote>
<pre wrap=""><!---->
In general, it's impossible for the OP to know what redirects may have
taken place during the normalization stage, as the OP may be completely
separate from the URL that's being verified.
</pre>
<pre wrap="">
</pre>
</blockquote>
Normalization at the RP side in mostly about adding an <a class="moz-txt-link-freetext" href="http://">http://</a> prefix
etc. As soon as the requests lands at the OP it's the OPs beer what to
do with I think....<br>
<br>
<br>
<div class="moz-signature">-- <br>
<table border="0" cellpadding="0" cellspacing="0">
<tbody>
<tr>
<td colspan="2">Regards </td>
</tr>
<tr>
<td colspan="2"> </td>
</tr>
<tr>
<td>Signer: </td>
<td>Eddy Nigg, <a href="http://www.startcom.org">StartCom Ltd.</a></td>
</tr>
<tr>
<td>Jabber: </td>
<td><a href="xmpp:startcom@startcom.org">startcom@startcom.org</a></td>
</tr>
<tr>
<td>Blog: </td>
<td><a href="http://blog.startcom.org">Join the Revolution!</a></td>
</tr>
<tr>
<td>Phone: </td>
<td>+1.213.341.0390</td>
</tr>
<tr>
<td colspan="2"> </td>
</tr>
</tbody>
</table>
</div>
</body>
</html>