<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
We'd have to revise the AX spec to support he privacy policy url. The
Yahoo OP is currently testing the SREG extension, and our lawyers
really like how we're able to link to the RP's privacy policy. It was
very unfortunate that this feature was omitted in AX.<br>
<br>
Moving forward, it probably makes more sense to make the RP's privacy
policy discoverable, rather than putting into AX.<br>
<br>
In either case, either the AX or Discovery spec has to be updated, and
there's a pretty big overhead to spinning up a new working group to do
this. A very expedient "hack" would be to put it into the UI Extension,
since the UI Extension is currently a work in progress, but there's not
all that much consensus to do this.<br>
<br>
Allen<br>
<br>
<br>
David Fuelling wrote:
<blockquote
cite="mid:51dae84d0907100750x6713d62du12a1ed6293519980@mail.gmail.com"
type="cite">
<div class="gmail_quote">On Fri, Jul 10, 2009 at 2:42 PM, Andrew
Arnott <span dir="ltr"><<a moz-do-not-send="true"
href="mailto:andrewarnott@gmail.com">andrewarnott@gmail.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote"
style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">There
is actually one feature sreg has that AX doesn't: privacy policy URL of
the RP.
<div><br>
</div>
</blockquote>
</div>
<br>
Why can't AX support a privacy policy URL? Is it a matter of not
having a commonly agreed upon attribute type-name?<br>
<pre wrap="">
<hr size="4" width="90%">
_______________________________________________
general mailing list
<a class="moz-txt-link-abbreviated" href="mailto:general@openid.net">general@openid.net</a>
<a class="moz-txt-link-freetext" href="http://openid.net/mailman/listinfo/general">http://openid.net/mailman/listinfo/general</a>
</pre>
</blockquote>
<br>
</body>
</html>