<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Hi Nat,<br>
<br>
OpenID has a huge opportunity in the mobile market, because logging
in/registering is at least an order of magnitude more painful on a
handset than on a standard desktop browser. Even with my iPhone,
logging in is terrible, and I can't think of a single time I've
bothered to register.<br>
<br>
At least from my perspective, I'm more interested in discussing UX
rather than protocol changes. Although the URLs are getting really
long, the URL length is an implementation detail that is mostly hidden
from the user. Supporting the equivalent of SAML's artifact binding as
an additional OpenID communication mode isn't really going to improve
the UX for users of iPhone class devices.<br>
<br>
Because OpenID and OAuth appear to be converging, I'd prefer to see
artifact-type binding implemented using OAuth's Request Token. In
OAuth, the RP (aka Consumer) first requests a Request Token using
direct communication, and then redirects the browser to the OP (aka SP)
with the Request Token to maintain the state. Instead of having the
browser pass all the request parameters on the URL, all the parameters
are represented by the Request Token, which is intented to be
relatively short.<br>
<br>
Allen<br>
<br>
<br>
Nat Sakimura wrote:
<blockquote
cite="mid:bf26e2340901291656h4f45e5a2x3524fc1899322252@mail.gmail.com"
type="cite">Hi. <br>
<br>
Are there poeple who are interested in discussing OpenID Mobile profile
sort of thing? <br>
Mobile phones has unique challenges of being restricted in URL length
etc. <br>
OpenID as it stands now has very lengthy URLs in both requests and
responses and it sometimes does not fit into the restrictions. <br>
SAML world has defined artifact binding to cope with it. IMHO, OpenID
should define something like that also. <br>
<br>
In Japan, there are bunch of people (including mobile carriers) who
wants to do it. <br>
<br>
Are there interest here as well? <br clear="all">
<br>
-- <br>
Nat Sakimura (=nat)<br>
<a moz-do-not-send="true" href="http://www.sakimura.org/en/">http://www.sakimura.org/en/</a><br>
<pre wrap="">
<hr size="4" width="90%">
_______________________________________________
specs mailing list
<a class="moz-txt-link-abbreviated" href="mailto:specs@openid.net">specs@openid.net</a>
<a class="moz-txt-link-freetext" href="http://openid.net/mailman/listinfo/specs">http://openid.net/mailman/listinfo/specs</a>
</pre>
</blockquote>
<br>
</body>
</html>