Redirect on YADIS ID de-reference?

Mark Rafn dagon at dagon.net
Thu Nov 24 11:58:27 PST 2005


On Thu, 24 Nov 2005, Martin Atkins wrote:

> While this is not directly relevant, OpenID specifies that the
> "Permanent Redirect" response code act as a kind of canonicalizer for
> the identity URL. If the user enters http://frank.livejournal.com/ and
> gets back a redirect to http://www.franknet.com/ an OpenID consumer must
> behave as if the user had originally entered http://www.franknet.com/,
> including the display of the user's identity.

Woah.  I didn't read any requirement nor recommendation that the
canonicalized identity be used for display.  I argue that the claimed
identity (pre-canonicalization) is what the user will usually prefer.
Better, of course, would be for a consumer to keep display name completely
separate from authentication, and allow me to display "Dagon", with a
claimed identity "dagon.net" and a canonical identity URL
http://www.dagon.net/".

Some consumers will choose to display claimed identity (LiveJournal does
today). I hope that none will choose to display canonicalized identity.
--
Mark Rafn    dagon at dagon.net    <http://www.dagon.net/>


More information about the yadis mailing list