Summarizing Where We're At

Drummond Reed drummond.reed at cordance.net
Tue Oct 17 03:57:13 UTC 2006


My votes on three issues (0 on everything else):

Consolidated Delegation Proposal
 * -1 on status quo (draft 10)
 * +1 on two-identifier

Change default session type
 * +1

Bare request
 * +1

=Drummond 

-----Original Message-----
From: specs-bounces at openid.net [mailto:specs-bounces at openid.net] On Behalf
Of Recordon, David
Sent: Monday, October 16, 2006 3:24 PM
To: Josh Hoyt; specs at openid.net
Subject: RE: Summarizing Where We're At

And here are my votes:

Request nonce and name
 * Take no action

Authentication age
 * -1, write as an extension first

Remove setup_url
 * 0 for removing, +1 for asking feedback from implementers

Consolidated Delegation Proposal
 * -1 on status quo (draft 10)
 * 0  on single-identifier
 * +1 on two-identifier

Change default session type
 * +1

Bare request
 * 0

--David


-----Original Message-----
From: joshhoyt at gmail.com [mailto:joshhoyt at gmail.com] On Behalf Of Josh
Hoyt
Sent: Monday, October 16, 2006 11:21 AM
To: Recordon, David
Cc: specs at openid.net
Subject: Re: Summarizing Where We're At

Here are my reactions to what's outstanding:

On 10/15/06, Recordon, David <drecordon at verisign.com> wrote:
> * Request Nonce and Name
>  - Has been partially implemented, openid.nonce -> 
> openid.response_nonce, no agreement on the need of a request nonce 
> specifically, rather discussion has evolved into allowing a RP to pass

> "appdata" like in Yahoo's BBAuth.  No formal proposal on the table 
> yet, thus will not be included in this version.

Take no action

> * Authentication Age
>  - Re-proposed today adding clarity in motivation, general consensus 
> is needed to add to specification.

-1

> * Remove setup_url
>  - Little discussion and no general consensus to do so.  Rather seems 
> asking for feedback from checkid_immediate implementers on the 
> parameter would be beneficial at this time.

+1

> * Consolidated Delegation Proposal
>  - Very active discussion, the only proposal I'm willing to stall the 
> spec for.  Seems very important a strong conceptual model is created 
> at this time.

-0 on status quo (draft 10)
+0 on single-identifier
+1 on two-identifier

> * Change Default session_type
>  - Proposed, no discussion yet.

Will address in separate message

> * Bare Request
>  - Proposed, no discussion yet.

-0 (YAGNI)

Josh

_______________________________________________
specs mailing list
specs at openid.net
http://openid.net/mailman/listinfo/specs




More information about the specs mailing list