Using XRI Proxy Resolvers in OpenID discovery

[Johnny Bufu]

On 30-Jul-07, at 12:58 PM, Eran Hammer-Lahav wrote:

> It has been mentioned on this list that XRI might be optional in  
> OpenID 2.0.
> If you read the spec with that mindset you can find ways to prove it.

Yes, support for XRIs is left for each RP to decide (as is a number  
of other things).

> Your answer is that all three discoveries are a MUST and if that's  
> the case,
> there is little point in this thread.

I don't think I have stated something that would imply this.

> OpenID 1.1 allowed for a very dumb RP. I was able to implement the  
> entire
> spec from scratch in C++ in under a day. OpenID 2.0 took 10 days  
> and it's
> still not complete (missing authority validation). My suggestion  
> was to
> consider allowing RP's to avoid dealing with XRI and XRDS by  
> requiring HTML
> discovery support on the End User side,

Do you mean the OP side? (The end user is only required to have a  
browser.)

Yadis is required for RPs. (There are good reasons for the HTML ->  
Yadis "upgrade")

Making Yadis optional for RPs and HTML mandatory for OPs would break  
other things - like the OPs offering inconsistent discovery  
information to RPs, based on their preference for Yadis or HTML.


Johnny