SREG namespace URI rollback
Josh Hoyt
josh at janrain.com
Mon Apr 2 21:08:13 UTC 2007
On 4/2/07, Johnny Bufu <johnny at sxip.com> wrote:
> Sorry - I may be missing something, but I still say the problem
> remains: if a SREG1.1 party builds a message with a namespace alias
> different than "sreg", it can confuse the other party which may be
> expecting specifically "sreg".
>
> Or, put it differently, identifying SREG1.1 with the same URI as
> SREG1.0 would require all RPs and OPs out there to add the namespace
> alias param to their messages, since it is required in OpenID2/
> SREG1.1 (and that's what the URI also means).
OpenID 2 messages would use the namespace URI and OpenID 1 messages
would use the "sreg" prefix. If you do both, all the time, you don't
have to care which kind of message it is, but I'm not proposing that
we require doing that.
If you are making a SREG request, you won't have to care whether it's
supposed to be 1.0 or 1.1 because they're *the same*. You only have to
care whether it's an OpenID 1 or OpenID 2 request so that you can make
sure that the other end understands the namespacing.
Josh
More information about the specs
mailing list