Email Address to URL Transformation

SitG Admin sysadmin at shadowsinthegarden.com
Thu Jan 28 22:50:16 UTC 2010


>If we assume web finger will be used to advertise the user's OpenID
>provider, it would appear in the XRD document.  So, a Relaying Party might
>query google.com and get an XRD document for me that points to yahoo.com for

Which is all well and fine if you trust google.com; standard 
complications, such as trust issues and MultiAuth and the 
nonfeasibility of having users remember their cosignature 
fingerprints, apply.

>I'm still not clear on what you are suggesting.  That's not to mean you
>don't have an interesting idea, but I do not understand the proposal and how
>it would be better than using data inside XRD documents.

I'm not addressing that part, though I'm agnostic about whether the 
query returns an XRD document or a GET string. I'm thinking more 
along the lines of joint ownership as multiple sponsors; i.e., a 
blogger accepts offers from Google *and* Yahoo (not to declare 
exclusive loyalty to either interest) for, if not advertising rights, 
perhaps just the Identity group each has formed to try leveraging 
OpenID (like Microsoft recognizes experts with MVPS - and offers them 
webhosting at mvps.org), assuming they ever do start something like 
that.

Or a particular website/community might be started as a joint venture 
between otherwise competing companies, but point back to some 
combination of those company's sites for OpenID instead of handling 
the hosting itself. Which is basic delegation; I think what I'm 
seeing here is more of a particular use-case to try bridging between 
the walled gardens, than any new application of the proposed 
technology.

-Shade


More information about the specs mailing list