<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div>If it’s the OIDF decision, I’m OK.</div><div><br></div><div><div>This bug will affect only Yahoo! and it’s RPs.</div><div>I don’t know any other major IdPs who uses different values for openid.claimed_id and openid.identity.</div><div>And RPs can simply remove fragment component from claimed_id when migrating in Yahoo!’s case.</div><div><br></div><div>For buggy RPs who use XRI, unfortunately…</div></div><div><br></div><div><br></div><div>ps.</div><div><div>As reality, the most major rails authentication library (and it’s PHP fork too) uses display_identifier in its OpenID 2.0 module.</div><div><a href="https://github.com/intridea/omniauth-openid/blob/master/lib/omniauth/strategies/open_id.rb#L69">https://github.com/intridea/omniauth-openid/blob/master/lib/omniauth/strategies/open_id.rb#L69</a></div><div><a href="https://github.com/opauth/openid/blob/master/OpenIDStrategy.php#L111">https://github.com/opauth/openid/blob/master/OpenIDStrategy.php#L111</a></div></div><div><br></div><div>I’ve tried to solve the Rails situation long time ago, but my pull-request to the oldest major rails openid plugin was rejected.</div><div>So I’ve gave up to fix the bug in Rails RPs.</div><div><a href="https://github.com/rails/open_id_authentication/pull/4">https://github.com/rails/open_id_authentication/pull/4</a></div><div><br></div><div><br></div><div><div>2014/08/29 0:18、Mike Jones <<a href="mailto:Michael.Jones@microsoft.com">Michael.Jones@microsoft.com</a>> のメール：</div><br class="Apple-interchange-newline"><blockquote type="cite"><div lang="EN-US" link="blue" vlink="purple" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;"><div class="WordSection1" style="page: WordSection1;"><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);">I don’t think we should accommodate bugs. That way lies madness.<o:p></o:p></span></div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;"><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);"> </span></div><div><div style="border-style: solid none none; border-top-color: rgb(181, 196, 223); border-top-width: 1pt; padding: 3pt 0in 0in;"><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;"><b><span style="font-size: 10pt; font-family: Tahoma, sans-serif;">From:</span></b><span style="font-size: 10pt; font-family: Tahoma, sans-serif;"><span class="Apple-converted-space"> </span><a href="mailto:openid-specs-ab-bounces@lists.openid.net">openid-specs-ab-bounces@lists.openid.net</a> [<a href="mailto:openid-specs-ab-bounces@lists.openid.net">mailto:openid-specs-ab-bounces@lists.openid.net</a>]<span class="Apple-converted-space"> </span><b>On Behalf Of<span class="Apple-converted-space"> </span></b>Nat Sakimura<br><b>Sent:</b><span class="Apple-converted-space"> </span>Thursday, August 28, 2014 6:27 AM<br><b>To:</b><span class="Apple-converted-space"> </span>Markus Sabadello<br><b>Cc:</b><span class="Apple-converted-space"> </span><a href="mailto:openid-specs-ab@lists.openid.net">openid-specs-ab@lists.openid.net</a><br><b>Subject:</b><span class="Apple-converted-space"> </span>Re: [Openid-specs-ab] display_identifier handling in OpenID 2.0 to OpenID Connect Migration<o:p></o:p></span></div></div></div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;"><o:p> </o:p></div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">I meant that. Perhaps we can add a clarifying phrase. <br><br>Nov's question however is about something different, I think. Buggy but popular OpenID 2.0 libraries are using OpenID.identity as the identifier that links asserted identity with the local account. These implementation will break with the current spec. The question is whether we should rescue them or not. <o:p></o:p></div></div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;"><br>=nat via iPhone<o:p></o:p></div></div><div><p class="MsoNormal" style="margin: 0in 0in 12pt; font-size: 12pt; font-family: 'Times New Roman', serif;"><br>Aug 28, 2014 22:08<span style="font-family: 'MS Mincho';">、</span>Markus Sabadello <<a href="mailto:markus.sabadello@gmail.com" style="color: purple; text-decoration: underline;">markus.sabadello@gmail.com</a>><span class="Apple-converted-space"> </span><span style="font-family: 'MS Mincho';">のメッセージ</span>:<o:p></o:p></p></div><blockquote style="margin-top: 5pt; margin-bottom: 5pt;"><div><div><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">This has confused me as well when I read the spec.<o:p></o:p></div></div><p class="MsoNormal" style="margin: 0in 0in 12pt; font-size: 12pt; font-family: 'Times New Roman', serif;">My sense is this spec should ignore openid.identity and just return openid.claimed_id = openid2_id.<o:p></o:p></p></div><p class="MsoNormal" style="margin: 0in 0in 12pt; font-size: 12pt; font-family: 'Times New Roman', serif;">Markus<o:p></o:p></p></div><div><p class="MsoNormal" style="margin: 0in 0in 12pt; font-size: 12pt; font-family: 'Times New Roman', serif;"><o:p> </o:p></p><div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">On Thu, Aug 28, 2014 at 4:53 AM, nov matake <<a href="mailto:nov@matake.jp" target="_blank" style="color: purple; text-decoration: underline;">nov@matake.jp</a>> wrote:<o:p></o:p></div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">OpenID 2.0 has 2 identifier, openid.claimed_id & openid.identity.<br>For historically reasons, some libraries/RPs are using openid.identity as user identifier, unfortunately.<br><br>Does this migration spec have plan to returning openid.identity? or just ignore such buggy libraries/RPs?<br><br>The biggest issue would be Y! inc & Y! Japan’s case.<br>They have fragment component only in openid.claimed_id.<br>_______________________________________________<br>Openid-specs-ab mailing list<br><a href="mailto:Openid-specs-ab@lists.openid.net" style="color: purple; text-decoration: underline;">Openid-specs-ab@lists.openid.net</a><br><a href="http://lists.openid.net/mailman/listinfo/openid-specs-ab" target="_blank" style="color: purple; text-decoration: underline;">http://lists.openid.net/mailman/listinfo/openid-specs-ab</a><o:p></o:p></div></div><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;"><o:p> </o:p></div></div></blockquote><blockquote style="margin-top: 5pt; margin-bottom: 5pt;"><div style="margin: 0in 0in 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;">_______________________________________________<br>Openid-specs-ab mailing list<br><a href="mailto:Openid-specs-ab@lists.openid.net" style="color: purple; text-decoration: underline;">Openid-specs-ab@lists.openid.net</a><br><a href="http://lists.openid.net/mailman/listinfo/openid-specs-ab" style="color: purple; text-decoration: underline;">http://lists.openid.net/mailman/listinfo/openid-specs-ab</a><o:p></o:p></div></blockquote></div>_______________________________________________<br>Openid-specs-ab mailing list<br><a href="mailto:Openid-specs-ab@lists.openid.net" style="color: purple; text-decoration: underline;">Openid-specs-ab@lists.openid.net</a><br><a href="http://lists.openid.net/mailman/listinfo/openid-specs-ab" style="color: purple; text-decoration: underline;">http://lists.openid.net/mailman/listinfo/openid-specs-ab</a></div></blockquote></div><br></body></html>