<div><span class="gmail_quote">On 3/12/08, <b class="gmail_sendername">techtonik</b> <<a href="mailto:techtonik@php.net">techtonik@php.net</a>> wrote:</span>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">So, if I understand correctly there is no way for consumer to detect which version - 1.0 or 1.1 is used in HTML delegation case, because delegation tags are the same, i.e.<br>
<p><link rel="openid.server" href="<a onclick="return top.js.OpenExtLink(window,event,this)" href="http://www.livejournal.com/openid/server.bml" target="_blank">http://www.livejournal.com/openid/server.bml</a>"><br>
<link rel="openid.delegate" href="<a onclick="return top.js.OpenExtLink(window,event,this)" href="http://exampleuser.livejournal.com/" target="_blank">http://exampleuser.livejournal.com/</a>"> </p>
so in my case Drupal consumer decides that either 1.0 or 1.1 version of specification is used and makes a request to OpenID server with openid.ns set to either "<a onclick="return top.js.OpenExtLink(window,event,this)" href="http://openid.net/signon/1.1" target="_blank">http://openid.net/signon/1.1</a>" or "<a onclick="return top.js.OpenExtLink(window,event,this)" href="http://openid.net/signon/1.0" target="_blank">http://openid.net/signon/1.0</a>". But 1.1 OpenID server doesn't know anything about openid.ns, because it was added only in 2.0 Therefore server fails to authenticate and this should be considered a bug in consumer, which should not send openid.ns at all. If everything above is right then where is the logic and what are the reasons for consumer to send openid.ns="<a onclick="return top.js.OpenExtLink(window,event,this)" href="http://openid.net/signon/1.1" target="_blank">http://openid.net/signon/1.1</a>" at all?<br>
<br>Thank you. </blockquote>
<div> </div>
<div> </div>
<div>Just to add my 2 cents, that namespace was introduced so you can discover an OpenID Server using XRI. That would be in the XRDS document to advertise that the OpenID Server supported a specific version of the spec. Since OpenID 2.0 incorporates the XRI feature (which was a sort of "third-party add-on" to the OpenID 1.x spec), that namespace is still used.</div>
<div> </div>
<div>But, like James said, you shouldn't use openid.ns with 2.0 anyway.</div>
<div> </div>
<div>Thanks,</div>
<div> </div>
<div>John Ehn</div>
<div><a href="http://extremeswank.com">extremeswank.com</a></div><br> </div>