<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
<META NAME="GENERATOR" CONTENT="GtkHTML/3.10.3">
</HEAD>
<BODY LINK="#0000ff">
On Fri, 2006-10-06 at 12:30 -0700, Drummond Reed wrote:
<BR>
<BLOCKQUOTE TYPE=CITE>
<FONT SIZE="2"><FONT COLOR="#000000">In other words, can a user just login to their IdP/i-broker, lthen follow “OpenID-enabled bookmarks” they have stored there to be directly logged in to sites where the user has logged in before?</FONT></FONT><BR>
</BLOCKQUOTE>
[...]<BR>
<BLOCKQUOTE TYPE=CITE>
<FONT SIZE="2"><FONT COLOR="#000000">(I suspect this may be part of the “bare message” thread but I confess as to not being fully up-to-speed on that issue.)</FONT></FONT><BR>
</BLOCKQUOTE>
<BR>
Yes, I think that is the most compelling case for the "bare response" proposal.<BR>
(although there are still unresolved conflicts in my head between that proposal and request nonces.)<BR>
<BR>
I don't recall offhand what the tally on that is. But if it doesn't pass, then no, this feature would not be in the OpenID 2.0 core spec, and thus may or may not work in the wild.<BR>
<BR>
One can imagine adding that on later, but if it doesn't go in core then it'll have to be something that RPs opt in to, and may not be supported universally. (which might work out okay.)
</BODY>
</HTML>