decoupling from HTML

[Paul Crowley]

Brad Fitzpatrick wrote:
> Identity URLs.  But considering that server URLs will likely be https
> (typekey will be), consumers already have to support https, so they might
> as well support https identity URLs too, eh?

That would really be great.  I'm not a huge fan of Verisign-style 
security, but it's definitely the best cryptographic security OpenID can 
offer as defined...
-- 
   __
\/ o\ Paul Crowley, paul at ciphergoth.org
/\__/ http://www.ciphergoth.org/