Interesting. I like that it's short and technically well written.<br><br>So in practice a Client App would need to be able to distinguish the classes of OpenID identifiers, so it know when to do the OpenID authn call, right? Does that mean some existing systems may have clashing namespaces (for instance, maybe someone has a local user "=hans" somewhere, and all of a sudden it's being interpreted as an iname.) I guess the Client App can try multiple means and hide that from the user.
<br><br>In 4. Theory of Operation / Technical Overview you say "The user is prompted for their verification key, which is typed into the supplied dialog box and submitted." --- I assume you mean "supplied entry field" or similar (for text apps)?
<br><br>Are you working on a PAM module for this?<br><br>Thanks,<br>Hans<br><br><br><div><span class="gmail_quote">On 9/1/07, <b class="gmail_sendername">John Ehn</b> <<a href="mailto:john@extremeswank.com">john@extremeswank.com
</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">The Inline Authentication Extension attempts to solve the problem of legacy and interactive applications (Telnet/SSH) that are unable to launch a client Web Browser to perform an authentication request.
<br><br><a href="http://extremeswank.com/openid_inline_auth.html" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">
http://extremeswank.com/openid_inline_auth.html</a><br><br>This is done through the use of "verification keys", which are provided either as needed by the OpenID Provider, or provided on a rotating basis from a hardware crypto device, or a key generating token (SecurID).
<br><br>As always, your comments are appreciated!<br><br>Thank you,<br><span class="sg"><br>John Ehn<br>
</span><br>_______________________________________________<br>specs mailing list<br><a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:specs@openid.net">specs@openid.net</a><br><a onclick="return top.js.OpenExtLink(window,event,this)" href="http://openid.net/mailman/listinfo/specs" target="_blank">
http://openid.net/mailman/listinfo/specs</a><br><br></blockquote></div><br><br clear="all"><br>-- <br>Hans Granqvist<br>CTO<br>Phone: +1 (408) 524-1598<br><a href="http://www.yubico.com/">http://www.yubico.com/</a>