Difference between 1.0 and 1.1
techtonik
techtonik at php.net
Fri Mar 14 12:08:11 UTC 2008
On Wed, Mar 12, 2008 at 8:00 PM, Kevin Turner <kevin at janrain.com> wrote:
>
> Yeah, we discovered that there are people sending openid.ns with v1
> messages to myOpenID. I think the case where this happens most is when
> someone has set up their own page with version 1 style delegation, with
> a "openid.server" link instead of "openid2.provider". Then you can get
> a v2-capable RP talking to a v2-capable OP, but since the delegation
> format is stale, they use v1 messages. Whereas a real v1 OP may well
> just ignore "openid.ns", because it didn't exist, this ns-aware
> v2-capable OP tries to inspect it to see what version it is...
Still the v2 RP shouldn't send "openid.ns" to v1 OP as v1 OP may simply fail
(and will be right) as it was in case of Blogger vs Drupal.
and the fact that there are *two* namespaces in the v2 spec for v1
> OpenID is sort of a disaster, but both of them are being used in this
> way now. (Drupal was sending whichever one I wasn't expecting...)
>
The patch for Drupal was sent. Let's hope it will be accepted and we won't
get anything wrong from Drupal anymore.
--
--anatoly t.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs/attachments/20080314/2eb2413d/attachment-0001.htm>
More information about the specs
mailing list