Summarizing Where We're At
Recordon, David
drecordon at verisign.com
Sun Oct 15 19:28:52 UTC 2006
So previously I had set the goal of the final draft coming out last
Friday, though we've missed that. I'm resetting this bar to Wednesday
which means we need to wrap up discussion on proposals where there is
general consensus as well as accept that some proposals will not make it
into this version. For all proposals, unless there is general consensus
they should be included by Tuesday evening they will not be included.
* Request Nonce and Name
- Has been partially implemented, openid.nonce ->
openid.response_nonce, no agreement on the need of a request nonce
specifically, rather discussion has evolved into allowing a RP to pass
"appdata" like in Yahoo's BBAuth. No formal proposal on the table yet,
thus will not be included in this version.
* Authentication Age
- Re-proposed today adding clarity in motivation, general consensus is
needed to add to specification.
* Remove setup_url
- Little discussion and no general consensus to do so. Rather seems
asking for feedback from checkid_immediate implementers on the parameter
would be beneficial at this time.
* Consolidated Delegation Proposal
- Very active discussion, the only proposal I'm willing to stall the
spec for. Seems very important a strong conceptual model is created at
this time.
* Change Default session_type
- Proposed, no discussion yet.
* Bare Request
- Proposed, no discussion yet.
I also feel strongly that no new proposals, except to update existing
ones, should be considered for inclusion in this version.
--David
More information about the specs
mailing list