[Openid-specs-ab] Spec call notes 7-Jun-12

Breno de Medeiros breno at google.com
Fri Jun 15 01:15:14 UTC 2012


Agree that username is problematic.
On Jun 14, 2012 4:06 PM, "John Bradley" <ve7jtb at ve7jtb.com> wrote:

> I would be happier with username_hint as it will cut down on errors by
> people who don't read the spec.
>
> I have had to deal with enough issues in openID 2 where RP don't read the
> spec do something stupid and the media blames openID.   I know we can't
> stop that completely,  but I know if it is called username in a year or so
> there will be a security incident,  that is not the specs fault but we will
> be blamed anyway.
>
> If there is a good reason for calling it username I won't try to block it.
>  At the moment the logic is mostly that is what facebook calls the element
> that they put the users profile page subsegment into.
>
> John B.
>
> On 2012-06-14, at 11:35 AM, Vladimir Dzhuvinov / NimbusDS wrote:
>
> > username_hint seems to reflect the claim purpose better!
> >
> > + 1
> >
> > Vladimir
> >
> > _______________________________________________
> > Openid-specs-ab mailing list
> > Openid-specs-ab at lists.openid.net
> > http://lists.openid.net/mailman/listinfo/openid-specs-ab
>
> _______________________________________________
> Openid-specs-ab mailing list
> Openid-specs-ab at lists.openid.net
> http://lists.openid.net/mailman/listinfo/openid-specs-ab
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-ab/attachments/20120614/1f8f6a52/attachment.html>


More information about the Openid-specs-ab mailing list