ditching multiple openid.server declarations

Martin Atkins mart at degeneration.co.uk
Fri Jun 10 05:45:47 PDT 2005


Brad Fitzpatrick wrote:
> Previously we'd discussed declaring multiple openid.server <link> tags.
> It was originally proposed from a high-availability perspective, until
> it was pointed out that consumers can't detect failure when it's the user
> agent that's timing out/failing, and you can't grab them back.
> 
> But I still kept it in because I was thinking about credential passing to
> sites like flickr for posting to my blog without my password (a layer on
> top of OpenID, not part of this spec), and I thought it'd be convenient to
> have flickr able to pick the openid server for where it'd want to post to.
> But that's a weak argument, since the user should declare anyway what blog
> to post it to.
> 
> Plus it really conflicts w/ openid.delegate... how do you line up multiple
> multiple openid.server declarations to their respective openid.delegate
> declarations without packing them together?  Ugly.
> 
> So --- I'm yanking out support for multiple openid.server declarations
> from Net::OpenID::Consumer.  It wasn't well documented or discussed
> anyway.
> 

On reflection, I agree. It makes so many things more complicated,
ambiguous or confusing. The only argument for it was that consumers
could pick an ID server that they trust, so if a particular site bands
my own ID server I can still use LiveJournal's, or vice-versa.

It's a shame to lose that, but I don't think it ever would have worked
out in practice anyway.



More information about the yadis mailing list