Difference between 1.0 and 1.1

techtonik techtonik at php.net
Wed Mar 12 14:28:01 UTC 2008


So, if I understand correctly there is no way for consumer to detect which
version - 1.0 or 1.1 is used in HTML delegation case, because delegation
tags are the same, i.e.

<link rel="openid.server" href="http://www.livejournal.com/openid/server.bml
">
<link rel="openid.delegate" href="http://exampleuser.livejournal.com/">
so in my case Drupal consumer decides that either 1.0 or 1.1 version of
specification is used and makes a request to OpenID server with
openid.nsset to either "
http://openid.net/signon/1.1" or "http://openid.net/signon/1.0". But
1.1OpenID server doesn't know anything about
openid.ns, because it was added only in 2.0  Therefore server fails to
authenticate and this should be considered a bug in consumer, which should
not send openid.ns at all. If everything above is right then where is the
logic and what are the reasons for consumer to send openid.ns="
http://openid.net/signon/1.1" at all?

Thank you.

On Wed, Mar 12, 2008 at 3:38 PM, John Ehn <john at extremeswank.com> wrote:

> Anatoly,
>
> 1.0 was an informal specification, so it was prone to ambiguities.  1.1solved the majority of these problems, as it is clearer which aspects of the
> specification are optional and mandatory.
>
> As far as I know, OpenID 1.1 is what all consumers should be supporting at
> this point.
>
> Thanks,
>
> John Ehn
> extremeswank.com
>
>
> On 3/12/08, techtonik <techtonik at php.net> wrote:
>
> > Hi.
> >
> > What is the difference between OpenID authentication version 1.0 and 1.1
> > ?
> > We need some arguments to switch preferable backwards compatibility
> > scheme from 1.0 to 1.1 in Drupal. Looks like there is no way to detect
> > which version of these two is used in case of HTML delegation and this
> > causes problems between Drupal 5 and Blogger, because Drupal chooses 1.0in this case.
> >
> > WBR,
> >
> > --
> > --anatoly t.
> > _______________________________________________
> > specs mailing list
> > specs at openid.net
> > http://openid.net/mailman/listinfo/specs
> >
> >
>


-- 
--anatoly t.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs/attachments/20080312/33f4394e/attachment-0002.htm>


More information about the specs mailing list