<HTML>
<HEAD>
<TITLE>Re: [OpenID] HTML-Based Discovery incompatibilities</TITLE>
</HEAD>
<BODY>
<FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'>You are probably right about the reality of things about it is still a mistake. Now is the time to break the bad parts and move forward. The relative insignificant adoption OpenID has today can be a benefit when trying to get things right.<BR>
<BR>
EHL<BR>
<BR>
<BR>
On 1/8/09 1:18 PM, "John Bradley" <<a href="john.bradley@wingaa.com">john.bradley@wingaa.com</a>> wrote:<BR>
<BR>
</SPAN></FONT><BLOCKQUOTE><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'>Eran,<BR>
<BR>
RP's are free to decide what openID's they accept. <BR>
<BR>
My concern is getting them to adopt the new XRD discovery. <BR>
<BR>
I think that user adoption and security concerns will eventually weed out the older and less secure discovery options.<BR>
<BR>
Some RP's may want to continue supporting rel links forever, however new features available thorough XRD will not be available via that method. I think it will naturally fall out of use.<BR>
<BR>
I imagine that RPs will start ignoring insecure discovery. As you say there is nothing like a conformance test for openID.<BR>
<BR>
I just don't see it being officially deprecated in the near future. <BR>
<BR>
We will have to live with rel, Yadis and XRD discovery in the spec for some time. <BR>
<BR>
=jbradley<BR>
<BR>
On 8-Jan-09, at 5:54 PM, Eran Hammer-Lahav wrote:<BR>
<BR>
</SPAN></FONT><BLOCKQUOTE><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'><BR>
On 1/8/09 12:45 PM, "John Bradley" <<a href="john.bradley@wingaa.com">john.bradley@wingaa.com</a>> wrote:<BR>
<BR>
</SPAN></FONT><BLOCKQUOTE><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'>I however don't see a move to deprecate the rel tags being acceptable to the<BR>
community at this point.<BR>
</SPAN></FONT></BLOCKQUOTE><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'><BR>
I would argue that the community that matters, i.e. end users, could not<BR>
care less. It is dependency on features like this one that make OpenID less<BR>
secure, harder to implement, less interoperable, and look ultra geeky.<BR>
<BR>
If I will have any influence on future RP adoption, I will do my best to<BR>
make them ignore HTML discovery completely. After all, in OpenID, it doesn't<BR>
seem to matter what the spec says anyway (unfortunately).<BR>
<BR>
EHL<BR>
<BR>
</SPAN></FONT></BLOCKQUOTE><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'><BR>
<BR>
</SPAN></FONT></BLOCKQUOTE>
</BODY>
</HTML>