To clarify something: The OP used for Blogger blogs is <a href="http://openid2.blogspot.com">openid2.blogspot.com</a>, is used on custom domains as well as *.<a href="http://blogspot.com">blogspot.com</a>. It's separate (today) from the OP used for a generic Google account. It's also a separate identity from the owner's identity; it has to be, because a given Google account can own many blogs, and each blog URL is its own OpenID. Obviously there is an ownership relationship behind the scenes here.<br>
<br>Note that a Blogger user can also insert the OpenID meta tags in their template to choose a different OP, shoudl they wish to do so.<br><br><br><div class="gmail_quote">On Sun, Jun 7, 2009 at 7:08 PM, Peter Williams <span dir="ltr"><<a href="mailto:pwilliams@rapattoni.com">pwilliams@rapattoni.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">ok im officially confused.<br>
<br>
do something obvious peter, like login to gmail. Great! It works. Gmail/Google is also an OP, doing directed id. It works, Ive found when talking to plaxo.<br>
<br>
peter happens to wander to <a href="http://blogspot.com" target="_blank">blogspot.com</a>. Without my involvement, Im logged in to my blogspot account. Some kind of auto-SSO between google and blogspot has happened, Ill assume. Lets assume its proprietary, and not openid.<br>
<br>
<br>
blogspot is an OP, and tells me to use <a href="http://openid2.blogspot.com/" target="_blank">http://openid2.blogspot.com/</a> as my openid. So I do.<br>
<br>
Plaxo accepts that openid, and no login experience at the OP is provided; ill assume my google credentials are being applied somehow at <a href="http://blogspot.com" target="_blank">blogspot.com</a>, possibly leeraging a "google accounts" session. Any, blogspot releases an assertion between <a href="http://blogspot.com" target="_blank">blogspot.com</a> and <a href="http://plaxo.com" target="_blank">plaxo.com</a>. Im not sure whether sreg is used, as if google profile AX alues are applied, or blogspot profile values are applied.<br>
<br>
Earlier, plaxo accepted the Google OP too - and bound it to my plaxo account.<br>
<br>
Do I now have two openids provisioned by one OP (operated as different domain names)?<br>
Do I now have two openids provisioned by two OPs?<br>
<br>
are the openid's synonyms? Are their lifecycles synced? i.e. destruction of one leads to destruction of the other?<br>
<br>
If I unbind one from plaxo, is the protocol supposed to unbind the other too (since plaxo may be supposed to know that they are synonyms)?<br>
<br>
are these the kind of problems that XRI was supposed to solve? - so RPs could use the metadata to act "intelligently" when faced with openid synonyms?<br>
<br>
Is the idea that - should blogspot be be sold off and become unconnected with Google Accounts, my blogspot openid may one day no longer be a synonym, and plaxo would then know no longer to unbind me from the gmail openid (merely because I opt to unbind my plaxo account from blogspot)?<br>
<br>
<br>
<br>
<br>
<br>
_______________________________________________<br>
general mailing list<br>
<a href="mailto:general@openid.net">general@openid.net</a><br>
<a href="http://openid.net/mailman/listinfo/general" target="_blank">http://openid.net/mailman/listinfo/general</a><br>
</blockquote></div><br>