Summarizing Where We're At

[Dick Hardt]

On 17-Oct-06, at 11:52 AM, Josh Hoyt wrote:

> On 10/17/06, Dick Hardt <dick at sxip.com> wrote:
>> >> >> * Authentication Age
>> >> >>  - Re-proposed today adding clarity in motivation, general
>> >> >> consensus is
>> >> >> needed to add to specification.
>> >> >
>> >> > -1
>> >
>> > There is no reason for this to be in the core. I could make more
>> > arguments about it, but I'll stop there, unless there is consensus
>> > that it should go in the core.
>>
>> Would you provide a reason to counter my justification:
>>         http://openid.net/pipermail/specs/2006-October/000433.html
>>
>> Your vote is a -1, not a zero, so I would like to understand why.
>
> The way that I understand your argument is "it has something to do
> with authentication, so put it in the core spec." Features should be
> in an extension if it can be, so that the spec is easier to
> understand, implement, and extend. Especially if there is not
> consensus.

Well, authentication is optional in the spec, so perhaps we should  
pull that out and make it an extension?
In order to just do attribute exchange, we have it so that the RP can  
decide NOT to request an identifier.