<html>
<head>
<meta name="generator" content="Windows Mail 17.5.10049.20813">
<style data-externalstyle="true"><!--
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph {
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
}
p.MsoNormal, li.MsoNormal, div.MsoNormal {
margin:0in;
margin-bottom:.0001pt;
}
p.MsoListParagraphCxSpFirst, li.MsoListParagraphCxSpFirst, div.MsoListParagraphCxSpFirst,
p.MsoListParagraphCxSpMiddle, li.MsoListParagraphCxSpMiddle, div.MsoListParagraphCxSpMiddle,
p.MsoListParagraphCxSpLast, li.MsoListParagraphCxSpLast, div.MsoListParagraphCxSpLast {
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
line-height:115%;
}
--></style></head>
<body dir="ltr">
<div data-externalstyle="false" dir="ltr" style="font-family: 'Calibri', 'Segoe UI', 'Meiryo', 'Microsoft YaHei UI', 'Microsoft JhengHei UI', 'Malgun Gothic', 'sans-serif';font-size:12pt;"><div> I didn't write my response well (or rather , the spell checker changed things without me noticing).</div><div><br></div><div>its perfectly normal, especially in corporate and US government contracting environments, for load balancers to be proxying locally-visible address with external addresses. Who knows on what local LAN addreses the listener is also listening, and exposing itself. who know which OTHER external addresses are also exposed (one for Saudi folk, another for Americas). such is the metadata subversion game played by spying agencies (and their consultants in standards committees, using their “special wording” skills).</div><div><br></div><div>what I find lacking in openid is a position that leads. I see lots of afraid contractors (wanting a large stipend for their govt division) or consultants who struggle to demo independence from undue “influence”.</div><div><br></div><div>having been in such spots myself, or having worked for many a defense contractor, I sympathize.</div><div><br></div><div><br></div><div><br></div><div data-signatureblock="true"><div><br></div><div>Sent from Windows Mail</div><div><br></div></div><div style="padding-top: 5px; border-top-color: rgb(229, 229, 229); border-top-width: 1px; border-top-style: solid;"><div><font face=" 'Calibri', 'Segoe UI', 'Meiryo', 'Microsoft YaHei UI', 'Microsoft JhengHei UI', 'Malgun Gothic', 'sans-serif'" style='line-height: 15pt; letter-spacing: 0.02em; font-family: "Calibri", "Segoe UI", "Meiryo", "Microsoft YaHei UI", "Microsoft JhengHei UI", "Malgun Gothic", "sans-serif"; font-size: 12pt;'><b>From:</b> <a href="mailto:home_pw@msn.com" target="_parent">Peter Williams</a><br><b>Sent:</b> Monday, April 13, 2015 4:33 PM<br><b>To:</b> <a href="mailto:ve7jtb@ve7jtb.com" target="_parent">John Bradley</a>, <a href="mailto:sakimura@gmail.com" target="_parent">Nat Sakimura</a><br><b>Cc:</b> <a href="mailto:openid-general@lists.openid.net" target="_parent">openid-general@lists.openid.net</a></font></div></div><div><br></div><div dir="">
<div>
<div style="font-family: Calibri,sans-serif; font-size: 11pt;">Not source routing, but tls pricing.<br>
<br>
Perfectly normal in us govt contractor environments (such as ca technologies) and sso.<br>
<br>
Bur we can pretend otherwise.<br>
<br>
Remember the difference between SSL v2 and ietf SSL v3 / tls. The latter should suddenly facilitated poroxyng, thanks to iesg (and a few academic grants of cash)<br>
<br>
<br>
<br>
Sent from my Windows Phone</div>
</div>
<div dir="ltr">
<hr>
<span style="font-family: Calibri,sans-serif; font-size: 11pt; font-weight: bold;">From:
</span><span style="font-family: Calibri,sans-serif; font-size: 11pt;"><a href="mailto:ve7jtb@ve7jtb.com" target="_parent">John Bradley</a></span><br>
<span style="font-family: Calibri,sans-serif; font-size: 11pt; font-weight: bold;">Sent:
</span><span style="font-family: Calibri,sans-serif; font-size: 11pt;">4/13/2015 3:03 PM</span><br>
<span style="font-family: Calibri,sans-serif; font-size: 11pt; font-weight: bold;">To:
</span><span style="font-family: Calibri,sans-serif; font-size: 11pt;"><a href="mailto:sakimura@gmail.com" target="_parent">Nat Sakimura</a></span><br>
<span style="font-family: Calibri,sans-serif; font-size: 11pt; font-weight: bold;">Cc:
</span><span style="font-family: Calibri,sans-serif; font-size: 11pt;"><a href="mailto:openid-general@lists.openid.net" target="_parent">openid-general@lists.openid.net</a></span><br>
<span style="font-family: Calibri,sans-serif; font-size: 11pt; font-weight: bold;">Subject:
</span><span style="font-family: Calibri,sans-serif; font-size: 11pt;">Re: [OpenID] openID provider / server setting</span><br>
<br>
</div>
<div style="-ms-word-wrap: break-word;">Nothing stops TLS from working on the loopback. You just can’t access it from another computer without source routing and that would be nasty.
<div><br>
</div>
<div>I take it that you want to run a AS and client on the same server as programming project.</div>
<div><br>
</div>
<div>I suspect that running the AS with a self signed certificate on a real IP address and accessing it from another computer would be easier. </div>
<div><br>
</div>
<div>One alternative might be to run a VM on your computer for the AS so that it can have it’s own network address. You can then run the client on your main computer. </div>
<div>Depending on the OS you can probably add entries to your hosts table to make it look nicer.</div>
<div><br>
</div>
<div>You can give <a href="https://bitbucket.org/PEOFIAMP/phpoidc" target="_parent">https://bitbucket.org/PEOFIAMP/phpoidc</a> a try that should be fairly readable code.</div>
<div><br>
</div>
<div>It should be fairly easy to set up. I suspect that fussing with self signed certs and your networks setting may take the longest. </div>
<div>I would use a VM like VerualBox as the AS myself, because I am lazy and it would be easier to debug.</div>
<div><br>
</div>
<div>John B.</div>
<div><br>
</div>
<div><br>
<div>
<blockquote style="margin-top: 0px; margin-bottom: 0px;">
<div>On Apr 13, 2015, at 6:49 AM, Nat Sakimura <<a href="mailto:sakimura@gmail.com" target="_parent">sakimura@gmail.com</a>> wrote:</div>
<br class="x_Apple-interchange-newline">
<div>
<div dir="ltr">I am terribly sorry that I have missed your message. <br>
<br>
A regular OP needs to serve over HTTPS. Thus, it cannot serve over 127.0.0.1, if that is what you mean by a locally hosted.
<div>Instead, you can use Self-Issued provider, which you can find the info at: </div>
<div><a href="http://openid.net/specs/openid-connect-core-1_0.html#SelfIssued" target="_parent">http://openid.net/specs/openid-connect-core-1_0.html#SelfIssued</a><br>
</div>
<div><br>
</div>
<div>Cheers, </div>
<div><br>
</div>
<div>Nat Sakimura</div>
<div><br>
</div>
</div>
<br>
<div class="x_gmail_quote">On Sat, Mar 21, 2015 at 5:19 PM Sam DT <<a href="mailto:samdt3263@gmail.com" target="_parent">samdt3263@gmail.com</a>> wrote:<br>
<blockquote class="x_gmail_quote" style="margin: 0px 0px 0px 0.8ex; padding-left: 1ex; border-left-color: rgb(204, 204, 204); border-left-width: 1px; border-left-style: solid;">
<div dir="ltr"><span style="color: rgb(68, 68, 68); line-height: 21.29px; font-family: Calibri,sans-serif; font-size: 15px;">Hi,</span><br style="color: rgb(68, 68, 68); line-height: 21.29px; font-family: Calibri,sans-serif; font-size: 15px;">
<br style="color: rgb(68, 68, 68); line-height: 21.29px; font-family: Calibri,sans-serif; font-size: 15px;">
<span style="color: rgb(68, 68, 68); line-height: 21.29px; font-family: Calibri,sans-serif; font-size: 15px;">I want to make my own local host an openID provider for the purpose of a class assignment.</span><br style="color: rgb(68, 68, 68); line-height: 21.29px; font-family: Calibri,sans-serif; font-size: 15px;">
<span style="color: rgb(68, 68, 68); line-height: 21.29px; font-family: Calibri,sans-serif; font-size: 15px;">The relying party that i have configured should redirect the user to my localhost page where i have hosted the server for authentication.</span><br style="color: rgb(68, 68, 68); line-height: 21.29px; font-family: Calibri,sans-serif; font-size: 15px;">
<span style="color: rgb(68, 68, 68); line-height: 21.29px; font-family: Calibri,sans-serif; font-size: 15px;">Can you tell me if this is possible using any openID library?</span><br style="color: rgb(68, 68, 68); line-height: 21.29px; font-family: Calibri,sans-serif; font-size: 15px;">
<br style="color: rgb(68, 68, 68); line-height: 21.29px; font-family: Calibri,sans-serif; font-size: 15px;">
<span style="color: rgb(68, 68, 68); line-height: 21.29px; font-family: Calibri,sans-serif; font-size: 15px;">I should be very thankful</span><br>
</div>
_______________________________________________<br>
general mailing list<br>
<a href="mailto:general@lists.openid.net" target="_parent">general@lists.openid.net</a><br>
<a href="http://lists.openid.net/mailman/listinfo/openid-general" target="_parent">http://lists.openid.net/mailman/listinfo/openid-general</a><br>
</blockquote>
</div>
_______________________________________________<br>
general mailing list<br>
<a href="mailto:general@lists.openid.net" target="_parent">general@lists.openid.net</a><br>
http://lists.openid.net/mailman/listinfo/openid-general<br>
</div>
</blockquote>
</div>
<br>
</div>
</div>
</div></div>
</body>
</html>