<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
David Nicol wrote:
<blockquote
cite="mid934f64a20611100824w69dbd9e9j4779f09bded1a9a1@mail.gmail.com"
type="cite">
<pre wrap="">On 11/10/06, David Fuelling <a class="moz-txt-link-rfc2396E" href="mailto:sappenin@gmail.com"><sappenin@gmail.com></a> wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Plus, why do we **not** want OpenId to work with email addresses (assuming
we maintain the principals of User Centric Identity if we use them?)
</pre>
</blockquote>
<pre wrap=""><!---->
Loss of focus. OpenID is a UCI system based on URLs. Someone who
wants to install OpenID on their web server shouldn't have to get into the
e-mail business too just to be compliant. Something else, a Greater
UCI Infrastructure,
</pre>
</blockquote>
I have no particular axe to grind on the use of email addresses but it
does strike me that this isn't an argument against them - it is a straw
man argument in the sense that it silently assumes that support for
email address identifiers implies mandatory support for email accounts
for all IdP's. Elsewhere the reverse straw man argument has also been
used, where the assumption was that people with email accounts but no
OpenID facility at the email provider would be tapping in their email
addresses instead of the OpenID URL as provided to them <i>by</i>
their OpenID provider.<br>
<br>
It's really quite simple, the AOLs of the world will tell their users
they <i>can</i> use their email address for OpenID, the email.com <i>won't</i>,
and the idp.com <i>may</i> (even though they don't do email). As I
understand it, a large ISP thinks this would be good for their users,
who already know they have an email address and which to them is really
their online identity right now.<br>
<br>
<blockquote
cite="mid934f64a20611100824w69dbd9e9j4779f09bded1a9a1@mail.gmail.com"
type="cite">
<pre wrap="">might select OpenID as the method for authenticating people who wish to
be known by their URL instead of their e-mail address.
</pre>
</blockquote>
Huh? Where is this greater UCI infrastructure of which you speak? Why
would <i>support</i> for email address based resolution stop it using
OpenID?<br>
<br>
<pre class="moz-signature" cols="72">--
Pete
</pre>
</body>
</html>