Yadis and OpenID: openid.server vs X-YADIS-Location

[Grant Monroe]

On 3/8/06, Martin Atkins <mart at degeneration.co.uk> wrote:
>
> Now, in order to do Yadis, one has to fetch the identity URL and look
> for the Yadis URL. In the process, (unless using the HEAD optimisation)
> the relying party has fetched the document containing the openid.server
> link, so it now knows the URL of the OpenID server without bothering to
> bear the extra overhead of fetching the Yadis document. Yadis has, for
> all intents and purposes, been bypassed.

This is not true if the server supports content negotiation, which any
server that can, should. If content negotiation is successful, the
XRDS file will be returned instead of the identity page.

--
Grant Monroe
JanRain, Inc.