Wow, that's a great review, James.<div><br></div><div>I am convinced that it's Allen's 1.1 endpoint HTML elements whereas I have 2.0 elements. In OpenID 1.1, delegation is entirely managed by the RP rather than a concert between RP and OP the way it is in 2.0, so delegation was simpler in 1.1 and easier to get right IMO. <br clear="all">
--<br>Andrew Arnott<br>"I [may] not agree with what you have to say, but I'll defend to the death your right to say it." - S. G. Tallentyre<br>
<br><br><div class="gmail_quote">On Tue, Oct 20, 2009 at 8:46 PM, Manger, James H <span dir="ltr"><<a href="mailto:James.H.Manger@team.telstra.com">James.H.Manger@team.telstra.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div bgcolor="white" lang="EN-AU" link="blue" vlink="purple">
<div>
<p class="MsoNormal"><span><span style="font-size:9.0pt;color:#333333"><a href="http://blog.nerdbank.net/" target="_blank">http://blog.nerdbank.net/</a> claims to be XHTML but isn’t valid XML. That could be a problem,
though <a href="http://allentom.com/" target="_blank">http://allentom.com/</a> also claims to be XHTML but also isn’t valid. They both have lots of unescaped ‘&’ characters so that doesn’t explain the difference, but other XML errors are only in one or the other so that could
cause different behaviour.</span></span></p>
<p class="MsoNormal"><span><span style="font-size:9.0pt;color:#333333">The <meta http-equiv=’X-XRDS-Location’ content=’<a href="https://xri" target="_blank">https://xri</a>…’> element in
<a href="http://blog.nerdbank.net/" target="_blank">http://blog.nerdbank.net/</a> (without a corresponding HTTP header) may be a more significant difference. Are RPs supposed to notice such a <meta> element?</span></span></p>
<p class="MsoNormal"><span><span style="font-size:9.0pt;color:#333333">Other minor differences: ‘ vs “ to quote OpenID <link> attributes; /> vs > to terminate <link> elements; empty path vs / path
on delegate URIs.</span></span></p>
<p class="MsoNormal"><span><span style="font-size:9.0pt;color:#333333">A more significant difference is that
<a href="http://blog.nerdbank.net/" target="_blank">http://blog.nerdbank.net/</a> includes OpenID v1 and v2 links, while
<a href="http://allentom.com/" target="_blank">http://allentom.com/</a> only has v1 links.</span></span></p>
<p class="MsoNormal"><span><span style="font-size:9.0pt;color:#333333"> </span></span></p>
<p class="MsoNormal"><span><span style="font-size:9.0pt;color:#333333">I am curious about what the actual cause turns out to be.</span></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D"> </span></p>
<p class="MsoNormal"><b><span lang="FR" style="color:#1F497D">James Manger</span></b><span style="color:#1F497D">
<br>
<a href="mailto:James.H.Manger@team.telstra.com" target="_blank"><span lang="FR" style="font-size:10.0pt">James.H.Manger@team.telstra.com</span></a>
<br>
</span><span style="font-size:10.0pt;color:#1F497D">Identity and security team</span><span style="color:#1F497D">
</span><span style="font-size:10.0pt;color:#1F497D">—</span><span style="font-size:10.0pt;color:#1F497D"> Chief Technology Office</span><span style="color:#1F497D">
</span><span style="font-size:10.0pt;color:#1F497D">—</span><span style="font-size:10.0pt;color:#1F497D"> Telstra</span></p>
<p class="MsoNormal"><span style="color:#1F497D"> </span><span style="font-size:11.0pt;color:#1F497D"></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:10.0pt;color:windowtext">From:</span></b><span lang="EN-US" style="font-size:10.0pt;color:windowtext"> <a href="mailto:openid-general-bounces@lists.openid.net" target="_blank">openid-general-bounces@lists.openid.net</a>
[mailto:<a href="mailto:openid-general-bounces@lists.openid.net" target="_blank">openid-general-bounces@lists.openid.net</a>] <b>On Behalf Of </b>Allen Tom<br>
<b>Sent:</b> Wednesday, 21 October 2009 2:09 PM<br>
<b>To:</b> Andrew Arnott<br>
<b>Cc:</b> general<br>
<b>Subject:</b> Re: [OpenID] <a href="http://wiki.openid.net" target="_blank">wiki.openid.net</a> openid support broken</span></p>
</div>
</div><div class="im">
<p class="MsoNormal"> </p>
<p class="MsoNormal">I also delegated my domain to <a href="http://myopenid.com" target="_blank">myopenid.com</a>, but I'm able to login to the Wiki using "<a href="http://allentom.com" target="_blank">allentom.com</a>" which has been delegated to
<a href="http://atom.myopenid.com/" target="_blank">"http://atom.myopenid.com/"</a><br>
<br>
YMMV<br>
Allen<br>
<br>
<br>
Andrew Arnott wrote: </p>
<p class="MsoNormal">This is what I sent to pbworks via their contact page:
</p>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal"><span><span style="font-size:9.0pt;color:#333333">The OpenID login that you have doesn't correctly handle delegation. When I try to log in with
<a href="http://blog.nerdbank.net/" target="_blank">http://blog.nerdbank.net/</a> it sends me to <a href="http://myopenid.com" target="_blank">
myopenid.com</a> with an openid.identity value of <a href="http://blog.nerdbank.net/" target="_blank">
http://blog.nerdbank.net/</a> instead of the correct value of <a href="http://andrew.arnott.myopenid.com/" target="_blank">
http://andrew.arnott.myopenid.com/</a> This makes it impossible for me to login. Please fix this asap.</span></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="font-size:9.0pt;color:#333333"><br clear="all">
</span></p>
</div>
<p class="MsoNormal"> </p>
</div></div>
</div>
</blockquote></div><br></div>