Unfortunately the <a href="http://freexri.com">freexri.com</a> service doesn't provide a way to modify the headers in your contact page; but you can of course configure your XRD to point to other places than the contact page.<br>
<br>Markus<br><br><div class="gmail_quote">On Wed, Aug 26, 2009 at 7:23 PM, John Bradley <span dir="ltr"><<a href="mailto:john.bradley@wingaa.com">john.bradley@wingaa.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Peter,<br>
<br>
The <a href="http://xri.net" target="_blank">xri.net</a> proxy is redirecting the RP's discovery to your default service via a http 302. This happens to be your contact page as you have your XRDS configured.<br>
<br>
At that point the RP is doing HTML discovery.<br>
If you look at the HTML of your contact page it contains:<br>
<link rel="openid.server" href="<a href="https://authn.freexri.com/authentication/" target="_blank">https://authn.freexri.com/authentication/</a>" /><br>
<link rel="openid2.provider" href="<a href="https://authn.freexri.com/authentication/" target="_blank">https://authn.freexri.com/authentication/</a>" /><br>
<link rel="openid.delegate" href="<a href="http://xri.net/@%21E459.819D.771.7990%215B62.6F13.7602.5176" target="_blank">http://xri.net/@!E459.819D.771.7990!5B62.6F13.7602.5176</a>" /><br>
<link rel="openid2.local_id" href="<a href="http://xri.net/@%21E459.819D.771.7990%215B62.6F13.7602.5176" target="_blank">http://xri.net/@!E459.819D.771.7990!5B62.6F13.7602.5176</a>" /><br>
The RP never sees the XRDS. You have a simple case of delegation via HTML tags.<br>
You could change your contact page to include a X-XRDS-Location or delegate to someplace else as you like.<br>
Changing your XRDS contact service will let you point to a blog or any other page with the correct markup to use as a openID. However the target URL will become your claimed_id.<br>
John B.<br>
<br>
On 26-Aug-09, at 12:48 PM, <a href="mailto:openid-general-request@lists.openid.net" target="_blank">openid-general-request@lists.openid.net</a> wrote:<br>
<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Date: Wed, 26 Aug 2009 08:18:33 -0700<br>
From: Peter Williams <<a href="mailto:pwilliams@rapattoni.com" target="_blank">pwilliams@rapattoni.com</a>><br>
Subject: [OpenID] typepads interesting service for leaving comments;<br>
per synonym delegation of OPs<br>
To: "<a href="mailto:openid-general@lists.openid.net" target="_blank">openid-general@lists.openid.net</a>"<br>
<<a href="mailto:openid-general@lists.openid.net" target="_blank">openid-general@lists.openid.net</a>><br>
Message-ID:<br>
<<a href="mailto:BFBC0F17A99938458360C863B716FE463DCDF23913@simmbox01.rapnt.com" target="_blank">BFBC0F17A99938458360C863B716FE463DCDF23913@simmbox01.rapnt.com</a>><br>
Content-Type: text/plain; charset="us-ascii"<br>
<br>
<a href="http://aws.typepad.com/aws/2009/08/introducing-amazon-virtual-private-cloud-vpc.html" target="_blank">http://aws.typepad.com/aws/2009/08/introducing-amazon-virtual-private-cloud-vpc.html</a> has a signin form. Rather than "sign" a comment, you just login to the commenting system (and can logout). Unlike google blogging, you don't need to have/retain a blog-side account.<br>
<br>
So, I signed in.<br>
<br>
First with <a href="http://home_pw.myopenid.com" target="_blank">home_pw.myopenid.com</a> (using my good ol myopenid account).<br>
<br>
Second with <a href="http://xri.net/@blog*lockbox" target="_blank">http://xri.net/@blog*lockbox</a> (the url form of my good ol XRI from <a href="http://freexri.com" target="_blank">freexri.com</a>).<br>
<br>
The really interesting part was the second login.<br>
<br>
<br>
a. The <a href="http://freexri.com" target="_blank">freexri.com</a> OP UX notes the cid, and asks me to confirm that this long number is my identity. ( I just said yes, like the average consumer will). After all, this is all the OP knows about me, on the typepad site, by design.<br>
<br>
<br>
<br>
b. After Openid Auth is all done, the commenting form then views me as: <a href="http://contact.freexri.com/contact/@blog*lockbox" target="_blank">contact.freexri.com/contact/@blog*lockbox</a><mailto:<a href="mailto:contact.freexri.com" target="_blank">contact.freexri.com</a>/contact/@blog*lockbox> - a URL that presumably folks can use to followup with me about my own rant (seeing as the site is a messaging frontend to my (hidden) emailbox).<br>
<br>
Im not real competent enough in XRI and SEP selection parameters to know... but I half believe that if I fiddle around with my XRD enough I - the user! - can actually control the URL shown in (b).<br>
<br>
We are almost there! This was viable, mainstream and has UCI (vs fb-style) features that were generally comprehensible. They gave me what I USED TO THINK OPENID WAS ALL ABOUT (a bit of autonomy from providers).<br>
<br>
It also revealed a feature that I don't understand. The XRI variant identity WAS SUPPOSED to do delegation to myopenid rather than the XRI server showing its own login page as an OP. And, it USED TO WORK.<br>
<br>
When I look at the config of my XRD (at my <a href="http://freexri.com" target="_blank">freexri.com</a> site), I note:<br>
<br>
This i-service [openid] is bound to this specific XRI instead of its authority. This means that it will not be shared by synonyms of this XRI."<br>
<br>
Im GUESSING that since the openid consumer focused (per the spec) on the XRI cid rather than XRI synonym I used, the rules in my XRD mean that typepad RP does NOT detect that I have delegation armed (for that synonym).<br>
<br>
<br>
</blockquote>
<br>
_______________________________________________<br>
general mailing list<br>
<a href="mailto:general@lists.openid.net" target="_blank">general@lists.openid.net</a><br>
<a href="http://lists.openid.net/mailman/listinfo/openid-general" target="_blank">http://lists.openid.net/mailman/listinfo/openid-general</a><br>
</blockquote></div><br>