I'm not sure I understand what the commotion is about :-)<div><br></div><div>OAuth discovery (when it is done), will answer the question: given the URL of a resource, where do I go to get access tokens for that resource. The question answered by the XRD element described in Section 5 is "does this OpenID endpoint support the Hybrid protocol". These two questions are somewhat related, but clearly different. And, yes, the latter is not nearly as exciting as the former.</div>
<div><br></div><div>Dirk.</div><div><br><br><div class="gmail_quote">On Mon, Nov 24, 2008 at 6:48 PM, Manger, James H <span dir="ltr"><<a href="mailto:James.H.Manger@team.telstra.com">James.H.Manger@team.telstra.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"><div class="Ih2E3d">>> Learning just that an OP supports the hybrid protocol<br>
>> (without any indication of the associated protected resources)<br>
>> seems to be of minimal value.<br>
<br>
> Yes. However, when OAuth discovery happens (and the standardization<br>
> effort is under way) it will much more than minimal value.<br>
> Standardizing OAuth discovery is not in scope for this spec, but<br>
> standardizing hybrid support indication is.<br>
<br>
<br>
</div>A future "OAuth discovery" could say:<br>
"This SP supports the hybrid protocol with this OP http://..."<br>
In this case section "5 Discovery" in the hybrid spec adds no value because the app already knows about the support.<br>
<br>
Or a future "OAuth discovery" might not mention OpenID.<br>
In this case section "5 Discovery" in the hybrid spec barely helps as there are no links between OP and SP.<br>
<div><div></div><div class="Wj3C7c"><br>
>> James Manger<br>
>> <a href="mailto:James.H.Manger@team.telstra.com">James.H.Manger@team.telstra.com</a><br>
>> Identity and security team — Chief Technology Office — Telstra<br>
<br>
<br>
_______________________________________________<br>
specs mailing list<br>
<a href="mailto:specs@openid.net">specs@openid.net</a><br>
<a href="http://openid.net/mailman/listinfo/specs" target="_blank">http://openid.net/mailman/listinfo/specs</a><br>
</div></div></blockquote></div><br></div>