[Openid-specs-ab] Spec call notes 7-Jun-12

Vladimir Dzhuvinov / NimbusDS vladimir at nimbusds.com
Fri Jun 15 20:25:36 UTC 2012


+1 for preferred_username.

username_hint may confuse people with handling of forgotten usernames /
passwords. 

Vladimir

--
Vladimir Dzhuvinov : www.NimbusDS.com : vladimir at nimbusds.com



-------- Original Message --------
Subject: Re: [Openid-specs-ab] Spec call notes 7-Jun-12
From: Justin Richer <jricher at mitre.org>
Date: Fri, June 15, 2012 5:23 pm
To: Mike Jones <Michael.Jones at microsoft.com>
Cc: John Bradley <ve7jtb at ve7jtb.com>, Vladimir Dzhuvinov / NimbusDS
<vladimir at nimbusds.com>, "openid-specs-ab at lists.openid.net"
<openid-specs-ab at lists.openid.net>


In case my previous response gets lost in the list traffic, I would 
rather see "preferred_username" instead of "username_hint" to match the 
PoCo naming of this same field.

 -- Justin

On 06/15/2012 12:09 PM, Mike Jones wrote:
> +1 that the name "username_hint" would cut down on errors by people who don't closely read the spec.
>
> -----Original Message-----
> From: openid-specs-ab-bounces at lists.openid.net [mailto:openid-specs-ab-bounces at lists.openid.net] On Behalf Of John Bradley
> Sent: Thursday, June 14, 2012 5:42 AM
> To: Vladimir Dzhuvinov / NimbusDS
> Cc: openid-specs-ab at lists.openid.net
> Subject: Re: [Openid-specs-ab] Spec call notes 7-Jun-12
>
> I would be happier with username_hint as it will cut down on errors by people who don't read the spec.
>
> I have had to deal with enough issues in openID 2 where RP don't read the spec do something stupid and the media blames openID. I know we can't stop that completely, but I know if it is called username in a year or so there will be a security incident, that is not the specs fault but we will be blamed anyway.
>
> If there is a good reason for calling it username I won't try to block it. At the moment the logic is mostly that is what facebook calls the element that they put the users profile page subsegment into.
>
> John B.
>
> On 2012-06-14, at 11:35 AM, Vladimir Dzhuvinov / NimbusDS wrote:
>
>> username_hint seems to reflect the claim purpose better!
>>
>> + 1
>>
>> Vladimir
>>
>> _______________________________________________
>> Openid-specs-ab mailing list
>> Openid-specs-ab at lists.openid.net
>> http://lists.openid.net/mailman/listinfo/openid-specs-ab
> _______________________________________________
> Openid-specs-ab mailing list
> Openid-specs-ab at lists.openid.net
> http://lists.openid.net/mailman/listinfo/openid-specs-ab
>
>
> _______________________________________________
> Openid-specs-ab mailing list
> Openid-specs-ab at lists.openid.net
> http://lists.openid.net/mailman/listinfo/openid-specs-ab



More information about the Openid-specs-ab mailing list