<div>In my opinion and/or experience...</div><div><br></div>Whether you use XRDS or HTML tags has nothing to do with getting Yahoo working with delegation. Only the RP cares about how you set up the delegation. So if Yahoo is not honoring the delegated identifier then either Yahoo is broken, or the RP is not performing discovery correctly. If using XRDS fixes it, then the problem was at the RP rather than Yahoo!<div>
<div><br></div><div>I just tested it, and Yahoo treats a delegated checkid_setup as a directed identity request regardless of what the openid.claimed_id value is. </div><div><br></div><div>Google doesn't support delegation at all. Some concern about asserting an Identifier it has no control over..., and then there's the fact that you have no local_id to use except an arbitrarily picked anonymous identifier they assigned to you for a particular RP, which doesn't work when passed as a local_id.</div>
<div><br></div><div>So yes, delegation is a great OpenID feature to be able to switch Providers without changing your identity. But you'll have to pick OPs other than Google and Yahoo.</div><div>--<br>Andrew Arnott<br>
"I [may] not agree with what you have to say, but I'll defend to the death your right to say it." - S. G. Tallentyre<br>
<br><br><div class="gmail_quote">On Sun, Jun 21, 2009 at 4:54 PM, Peter Williams <span dir="ltr"><<a href="mailto:pwilliams@rapattoni.com">pwilliams@rapattoni.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
try using the X-XRDS-... trick, for use by YADIS. All the metadata is the in the XRD instead,as located by the X-XRDS-... header.<br>
<br>
We had it working last week with Yahoo (but not with Google), when we used XRD file.<br>
<br>
With Yahoo, it didn't seem to matter what you put in the Service's LocalID - which makes sense if you think about the semantics of LocalID. But, in the context of openid discovery, I THOUGHT (given the UCI security model) citation of localID in a vanity XRD was supposed to REQUIRE Yahoo (the OP) to use the directed id of the user's choice (assuming there are several)!<br>
<br>
if someone can, please point to a public, working trial of delegating to Google Accounts OP. Its an important milestone for openid - when vanity XRDs are properly handled by all the major OPs, including FaceBook, Google etc. We know openid is balancing commercial and personal interests then. A technology that (a) works in practice, and (b) somehow balances such contrary interests is, of course a world beater (like SSL!)<br>
<br>
________________________________________<br>
From: <a href="mailto:general-bounces@openid.net">general-bounces@openid.net</a> [<a href="mailto:general-bounces@openid.net">general-bounces@openid.net</a>] On Behalf Of Tom Edwards [<a href="mailto:t_edwards@btinternet.com">t_edwards@btinternet.com</a>]<br>
Sent: Sunday, June 21, 2009 3:21 PM<br>
To: <a href="mailto:general@openid.net">general@openid.net</a><br>
Subject: [OpenID] Delegation leading to new accounts on websites<br>
<div><div></div><div class="h5"><br>
My personal OpenID server broke a while back, and I've decided this<br>
evening to start delegating in order continue using my personal URL<br>
(<<a href="http://steamreview.org" target="_blank">http://steamreview.org</a>>). This is the code now in my page header:<br>
> <link rel="openid.delegate openid2.local_id"<br>
> href="<a href="http://www.flickr.com/photos/varsity/" target="_blank">http://www.flickr.com/photos/varsity/</a>" /><br>
> <link rel="openid.server openid2.provider"<br>
> href="<a href="https://open.login.yahooapis.com/openid/op/auth" target="_blank">https://open.login.yahooapis.com/openid/op/auth</a>" /><br>
But when I login to the sites I used my openid on before it broke (I've<br>
tried Get Satisfaction and Userstyles.org so far), they don't recognise<br>
me as an pre-existing user. They think I'm<br>
<a href="http://www.flickr.com/photos/varsity/" target="_blank">www.flickr.com/photos/varsity/</a>, whereas I actually still want to be<br>
<a href="http://steamreview.org" target="_blank">steamreview.org</a>.<br>
<br>
Is this intended behaviour? I thought the point of delegation was to<br>
allow people to switch providers without changing consumer-facing identity.<br>
<br>
_______________________________________________<br>
general mailing list<br>
<a href="mailto:general@openid.net">general@openid.net</a><br>
<a href="http://openid.net/mailman/listinfo/general" target="_blank">http://openid.net/mailman/listinfo/general</a><br>
_______________________________________________<br>
general mailing list<br>
<a href="mailto:general@openid.net">general@openid.net</a><br>
<a href="http://openid.net/mailman/listinfo/general" target="_blank">http://openid.net/mailman/listinfo/general</a><br>
</div></div></blockquote></div><br></div></div>