Proposal: consumer sends special openid.server discovery header URL/arg

Brad Fitzpatrick brad at danga.com
Fri May 20 09:28:07 PDT 2005


On Fri, 20 May 2005, Martin Atkins wrote:

> > Either:
> >
> > 1) New URL argument:
> [snip]
> > 2) New HTTP header:
> [snip]
>
> I don't really like either of those options, but I'd pick 1) if I had to
> choose, for the reasons you state. People would forget to use the
> no-cache directive, and in most cases it'll be fine but then there'll be
> some weird case where for some reason a consumer (or a non-browser
> client, more likely) makes a request through a shared proxy and it'll
> screw everything up.

What about User-Agent including "openid.discover" somewhere in it?

> The whole idea seems like yet another giant hack, but I see the
> sentiment behind it. Really, it seems like it should be LiveJournal that
> solves this problem, not OpenID. I hope someone comes up with a better
> way, but I don't have one.

Yeah, I guess we could build a table of IP addresses of our top
discovering peers.... deadjournal, etc.

But I'm afraid the "long tail" of MT/Wordpress/etc sites wouldn't show up
in our table.

- Brad


More information about the yadis mailing list