<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.6000.16414" name=GENERATOR></HEAD>
<BODY
style="WORD-WRAP: break-word; -khtml-nbsp-mode: space; -khtml-line-break: after-white-space">
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=116264817-06042007>I
would think that you wouldn't need to track the notion of a session but have
something where the selector that tracked where the card was previously sent in
terms of a list would allow you to graphically send another event. You could
optionally walk a list based on each card.</SPAN></FONT></DIV>
<BLOCKQUOTE dir=ltr style="MARGIN-RIGHT: 0px">
<DIV class=OutlookMessageHeader dir=ltr align=left><FONT face=Tahoma
size=2>-----Original Message-----<BR><B>From:</B> Johannes Ernst
[mailto:jernst+openid.net@netmesh.us]<BR><B>Sent:</B> Friday, April 06, 2007
12:29 PM<BR><B>To:</B> McGovern, James F (HTSC, IT)<BR><B>Cc:</B>
specs@openid.net<BR><B>Subject:</B> Re: Logout<BR><BR></FONT></DIV>So far,
neither OpenID nor CardSpace define the notion of a session, so no common
logout is possible within the standard protocols.
<DIV><FONT face=Arial color=#0000ff size=2></FONT><BR
class=khtml-block-placeholder></DIV>
<DIV>What we do in our code at NetMesh is to add a convention where</DIV>
<DIV> RP-URL?lid=OPENID</DIV>
<DIV>is the same thing as "submitted OpenID URL in the first form", to which
the RP-URL responds with a redirect to the OP, while</DIV>
<DIV> RP-URL?lid=</DIV>
<DIV>means "become anonymous again" aka "logout".</DIV>
<DIV><FONT face=Arial color=#0000ff size=2></FONT><BR
class=khtml-block-placeholder></DIV>
<DIV>There are substantial usability issues with common logout in a
decentralized, "internet-scale" approach, however, that nobody has really
solved as far as I know.</DIV>
<DIV><FONT face=Arial color=#0000ff
size=2></FONT> </DIV></BLOCKQUOTE><FONT SIZE=3><BR>
<BR>
*************************************************************************<BR>
This communication, including attachments, is<BR>
for the exclusive use of addressee and may contain proprietary,<BR>
confidential and/or privileged information. If you are not the intended<BR>
recipient, any use, copying, disclosure, dissemination or distribution is<BR>
strictly prohibited. If you are not the intended recipient, please notify<BR>
the sender immediately by return e-mail, delete this communication and<BR>
destroy all copies.<BR>
*************************************************************************<BR>
</FONT>
</BODY></HTML>