<div class="gmail_quote"><div class="Ih2E3d">On Wed, Mar 12, 2008 at 8:00 PM, Kevin Turner <<a href="mailto:kevin@janrain.com" target="_blank">kevin@janrain.com</a>> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div><br>
</div>Yeah, we discovered that there are people sending openid.ns with v1<br>
messages to myOpenID. I think the case where this happens most is when<br>
someone has set up their own page with version 1 style delegation, with<br>
a "openid.server" link instead of "openid2.provider". Then you can get<br>
a v2-capable RP talking to a v2-capable OP, but since the delegation<br>
format is stale, they use v1 messages. Whereas a real v1 OP may well<br>
just ignore "openid.ns", because it didn't exist, this ns-aware<br>
v2-capable OP tries to inspect it to see what version it is...</blockquote></div><div><br>Still
the v2 RP shouldn't send "openid.ns" to v1 OP as v1 OP may simply fail
(and will be right) as it was in case of Blogger vs Drupal.<br>
<br></div><div class="Ih2E3d"><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
and the fact that there are *two* namespaces in the v2 spec for v1<br>
OpenID is sort of a disaster, but both of them are being used in this<br>
way now. (Drupal was sending whichever one I wasn't expecting...)<br></blockquote></div></div><br>The patch for Drupal was sent. Let's hope it will be accepted and we won't get anything wrong from Drupal anymore.<br>
<br>-- <br>--anatoly t.