<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
</head>
<body bgcolor="#ffffff" text="#000000">
<font size="-1"><font face="Helvetica, Arial, sans-serif">Hi All,<br>
<br>
I'm new to OpenID and reading up before implementation and I have a few
questions. Sorry for the n00b level, but I did try to figure things out
myself.<br>
<br>
Concerning 'OpenID Authentication 1.1'<br>
* Paragraph 4.2.2.3, </font></font>I cannot place the term 'opaque',
what does it mean in this context? (I'm not a native English
speaker(/reader))<br>
* Paragraph 4.2.2..3 is missing a right parenthesis, where does it go?<br>
* Paragraph 4.3.2.2, openid.assoc_handle, I do not understand the
meaning of 'to fine for', I tried different online translations, but
can't work it out. <br>
<br>
<font size="-1"><font face="Helvetica, Arial, sans-serif">I think I got
these, but would like them verified:<br>
* DH-SHA1 means using SHA1 for encrypting the mac key?<br>
* HMAC-SHA1 means using SHA1 for message authentication? But if this
is true, then what does the HMAC function do?<br>
* The secret(..) function is a server side function encrypting the
assoc_handle with whatever method the server desires?<br>
* Delegating authentication as described in paragraph 3.1.1. is a
single/one time step. There can be no delegation after delegation?<br>
* Should the end user have to log in on the server in order for it to
verify the claimed id, the difference between checkid_immediate and
checkid_setup is that the first says a user should perform the
authentication on the server (at the returned openid.user_setup_url)
where the latter directly performs any required authentication?<br>
<br>
</font></font>I'm currently reading the 2.0 specs, which raises (a lot
of) new questions, but sure helped me understand the 1.1 better.<br>
<br>
<br>
Thanks a bunch,<br>
<br>
Coen
</body>
</html>