Two Identifiers - no caching advantage

Josh Hoyt josh at janrain.com
Fri Oct 20 00:19:14 UTC 2006


On 10/19/06, Dick Hardt <dick at sxip.com> wrote:
> If you want that to happen, then you have to spec out that the RP is
> verifying the IdP-specific identifier and portable identifier binding
> when it receives it. That is not in the current proposal.

If that is not in there, then the proposal *is* worse than
one-identifier and needs to be fixed. I guess I need to read it more
closely. The primary reason that I prefer two-identifier is that the
relying party is more strict about what it's accepting.

Josh



More information about the specs mailing list