Two Identifiers - no caching advantage
Josh Hoyt
josh at janrain.com
Fri Oct 20 00:19:14 UTC 2006
On 10/19/06, Dick Hardt <dick at sxip.com> wrote:
> If you want that to happen, then you have to spec out that the RP is
> verifying the IdP-specific identifier and portable identifier binding
> when it receives it. That is not in the current proposal.
If that is not in there, then the proposal *is* worse than
one-identifier and needs to be fixed. I guess I need to read it more
closely. The primary reason that I prefer two-identifier is that the
relying party is more strict about what it's accepting.
Josh
More information about the specs
mailing list