OpenID Attribute Exchange Protocol questions

Dick Hardt dick at sxip.com
Tue Jul 10 15:23:52 UTC 2007


On 10-Jul-07, at 1:47 AM, James Henstridge wrote:

> On 10/07/07, Johnny Bufu <johnny at sxip.com> wrote:
>>
>> On 6-Jul-07, at 3:54 AM, James Henstridge wrote:
>>>>
>>> Would that be appropriate to include in the spec or some best
>>> practices document?
>>
>> I see this as a pure OpenID (core) issue and don't feel the need to
>> touch it in the AX spec.
>
> That would be appropriate if the OpenID authentication spec covered
> the idea of unsolicited OpenID responses.
>
> Given that it does not cover unsolicited responses and the AX spec
> uses them, it would seem sensible for the AX spec to describe in
> detail how they are meant to work.

The appropriate place would be in the core spec so that other  
extensions would work the same way.

-- Dick



More information about the specs mailing list