Specifying identifier recycling

Granqvist, Hans hgranqvist at verisign.com
Mon Jun 4 14:51:20 UTC 2007


> So I ask again - does anyone see any issues with the 
> fragments being used like this:
> 
> 	http://openid.net/pipermail/specs/2007-May/001767.html	
> 

Seems reasonable in essence. But it adds complexity and
removes some immediacy of URL identifiers-as-is.

Do fragments need special handling just to handle id 
recycling risks?

I'm probably missing some context, but can't the issuing OP 
make sure to issue unique IDs, like http://example.com/user1234 
instead of http://example.com/user#1234 ?  

Hans



More information about the specs mailing list