<html><head><base href="x-msg://4894/"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">I don't know of anyone doing that. <div><br></div><div>There have been some dissuasions about doing holder of key as an option in openID Connect for high security (LoA 4) use cases.</div><div><br></div><div>It wouldn't be hard to do in OpenID 2.0, but you will probably need to set up a special IdP.</div><div><br></div><div>I don't think MyOpenid ever passed on the cert as a AX attribute, it was just generating a JainRain cert for the primary authenticator.</div><div><br></div><div>John B.<br><div><div>On 2011-08-05, at 5:13 PM, Peter Williams wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><span class="Apple-style-span" style="border-collapse: separate; font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; font-size: medium; "><div class="hmmessage" style="font-size: 10pt; font-family: Tahoma; "><div dir="ltr">how long has it been since I first heard of openid? (digital ID world, San Jose)?<span class="Apple-converted-space"> </span><br> <br>Anyways, now 30% of the US towns offering an MLS website (for realtors) are capable of working with openid providers (thanks to Microsoft Azure gatewaying technology).<br> <br>We will see if anyone adopts it, now it works.<br> <br>if anyone cares, it was Microsoft delivery, architeture and packaging that sealed the day. They didnt seek to govern. They didnt bundle it with their cloud framework for hosting. They didnt force any openid-specific changed in the app. They didnt make us argue religious wars (is OAUTH better than openid, than SAML, than this or that). They dont update the code every 2 weeks. They did enable interoperability; and they did enable the DISTINCTIVE features of openid (webbiness) to showcase themselves.<br> <br>anyone know of a OP doing SSL client authn. Myopenid used to do it... but I cannot fathom how to turn it on, these days. What we NEED is for the OP to send the cert received via SSL client authn, as an AX attribute.... (We want to parse its AIA URI field(s), and dereference the rich metadata documents thereby identified)<br></div>_______________________________________________<br>general mailing list<br><a href="mailto:general@lists.openid.net">general@lists.openid.net</a><br><a href="http://lists.openid.net/mailman/listinfo/openid-general">http://lists.openid.net/mailman/listinfo/openid-general</a><br></div></span></blockquote></div><br></div></body></html>