Re: Using email address as OpenID identifier

2008-04-11 Thread Joseph Holsten
2008 3:21 PM > >> To: specs@openid.net > >> Subject: Using email address as OpenID identifier > >> > >> This would require defining an OpenID SRV record in DNS. Would make > >> sense for someone to get this formally defined as part of IETF. Could > >&g

Re: Using email address as OpenID identifier

2008-04-11 Thread Peter Davis
> sense for someone to get this formally defined as part of IETF. Could >> kinda be done in the same way that Boeing is moving forward >> definition >> of XRI in LDAP.. >> >> -Original Message- >> >> Message: 1 >> Date: Mon, 07 Apr 2008 18:56:57 +

RE: Using email address as OpenID identifier

2008-04-09 Thread Paul E. Jones
ate: Mon, 07 Apr 2008 18:56:57 +0100 > From: Martin Atkins <[EMAIL PROTECTED]> > Subject: Re: Using email address as OpenID identifier > To: specs@openid.net > Message-ID: <[EMAIL PROTECTED]> > Content-Type: text/plain; charset=ISO-8859-1; format=flowed > >

Re: Using email address as OpenID identifier

2008-04-07 Thread Holger Baxmann
t; From: Martin Atkins <[EMAIL PROTECTED]> > Subject: Re: Using email address as OpenID identifier > To: specs@openid.net > Message-ID: <[EMAIL PROTECTED]> > Content-Type: text/plain; charset=ISO-8859-1; format=flowed > > Paul E. Jones wrote: >> >> Perhaps it is

Re: Using email address as OpenID identifier

2008-04-07 Thread Martin Atkins
Paul E. Jones wrote: > > > I’ll give you that one: that’s certainly easier. But, does not cause > some confusion? After all, one’s identity is not yahoo.com, but that is > the identity provider. Perhaps the prompts around the Internet ought to > Say “OpenID Provider:” instead? :-) > I pr

Re: Using email address as OpenID identifier

2008-04-07 Thread Martin Atkins
Paul E. Jones wrote: > > Perhaps it is important to say, though, that I do not think it requires > the e-mail providers to get on board with this (in my view) simpler > notation. I could use an ID like [EMAIL PROTECTED] and that should > work, if myopenid.com would publish the appropriate NAPT

RE: IDMML (was RE: Using email address as OpenID identifier)

2008-04-02 Thread Drummond Reed
> >> George Fletcher wrote: > >> > >> I think relying party sites that support OpenID could do more to make > it > >> clear on their home pages that they support OpenID (as often it's > hidden > >> behind another click). This could be as simple as some tags that > >> advertise support for OpenID.

RE: IDMML (was RE: Using email address as OpenID identifier)

2008-04-02 Thread Drummond Reed
Original Message- > From: Chris Drake [mailto:[EMAIL PROTECTED] > Sent: Wednesday, April 02, 2008 1:30 PM > To: Drummond Reed > Cc: 'George Fletcher'; 'Dick Hardt'; specs@openid.net > Subject: Re: IDMML (was RE: Using email address as OpenID identifier)

Re: IDMML (was RE: Using email address as OpenID identifier)

2008-04-02 Thread Chris Drake
Hi Drummond, I pushed hard for RP identification for 2 or 3 months back around October 2006. If anyone wants to go back through the archives, there's a pile of other important reasons to have some way that an IdP and/or browser agent can identify an OpenID-enabled site. The antique thread below

Re: IDMML (was RE: Using email address as OpenID identifier)

2008-04-02 Thread George Fletcher
Drummond Reed wrote: >>> Dick Hardt wrote: >>> >>> :-) ... that label would be more accurate. There is lots of work to be >>> done to make OpenID simpler for users. I think that what will be easy >>> for users is something provided by the browser that lets the user >>> click to initiate a login o

IDMML (was RE: Using email address as OpenID identifier)

2008-04-02 Thread Drummond Reed
> > Dick Hardt wrote: > > > > :-) ... that label would be more accurate. There is lots of work to be > > done to make OpenID simpler for users. I think that what will be easy > > for users is something provided by the browser that lets the user > > click to initiate a login or registration. No typi

RE: Using email address as OpenID identifier

2008-04-02 Thread Paul E. Jones
On Behalf Of Joseph Anthony Pasquale Holsten Sent: Wednesday, April 02, 2008 4:52 AM To: Paul E. Jones Cc: specs@openid.net Subject: Re: Using email address as OpenID identifier Does anyone have the time to write an email -> xrds discovery spec so we can formally ignore it? And so people

Re: Using email address as OpenID identifier

2008-04-02 Thread George Fletcher
Dick Hardt wrote: > > On 1-Apr-08, at 11:15 PM, Paul E. Jones wrote: >> Dick, >> >> I’ll give you that one: that’s certainly easier. But, does not cause >> some confusion? After all, one’s identity is not yahoo.com, but that >> is the identity provider. Perhaps the prompts around the Inter

Re: Using email address as OpenID identifier

2008-04-02 Thread Joseph Anthony Pasquale Holsten
Does anyone have the time to write an email -> xrds discovery spec so we can formally ignore it? And so people can argue with their dns providers instead of on list? http:// Joseph Holsten .com On 02008:04:01, at 9:30CDT, Paul E. Jones wrote: Folks, I’ve seen discussion here and there

Re: Using email address as OpenID identifier

2008-04-01 Thread Dick Hardt
On 1-Apr-08, at 11:15 PM, Paul E. Jones wrote: Dick, I’ll give you that one: that’s certainly easier. But, does not cause some confusion? After all, one’s identity is not yahoo.com, but that is the identity provider. Perhaps the prompts around the Internet ought to Say “OpenID Provide

Re: Using email address as OpenID identifier

2008-04-01 Thread James Henstridge
On 02/04/2008, Paul E. Jones <[EMAIL PROTECTED]> wrote: > > A solution that matches closer with what the user expects would be to > > map "[EMAIL PROTECTED]" to a claimed ID of "mailto:[EMAIL PROTECTED]". > > The average user is not going to know what "mailto:"; is. The mailto: transition would

RE: Using email address as OpenID identifier

2008-04-01 Thread Paul E. Jones
To: Paul E. Jones Cc: 'Eran Hammer-Lahav'; specs@openid.net Subject: Re: Using email address as OpenID identifier Entering yahoo.com is even easier! On 1-Apr-08, at 10:05 PM, Paul E. Jones wrote: Eran, I'm not suggesting that the address must be a real e-mail address

Re: Using email address as OpenID identifier

2008-04-01 Thread James Henstridge
On 02/04/2008, Paul E. Jones <[EMAIL PROTECTED]> wrote: > Brad, > > Your point about DNS limitations is valid. Then again, anybody who will be > offering the open identity server is likely going to have control over their > DNS. Still, I'm not opposed to alternatives. > > But, since you brought u

Re: Using email address as OpenID identifier

2008-04-01 Thread Dick Hardt
On 1-Apr-08, at 10:02 PM, Paul E. Jones wrote: Dick, On this point, I really have to disagree. Even I rarely enter a URL into a web browser. Why bother when I know the web browser will figure it out for me. I don’t want to type http:// or https:// :-) I don't want to type the protocol

RE: Using email address as OpenID identifier

2008-04-01 Thread Paul E. Jones
James, >>yahoo.com. IN NAPTR 100 10 "U" "OpenID2" "^(.+)@(.*)$!https://me.yahoo.com/\1!i"; . > > > 1. when a user enters an email address into an RP, how is the claimed > ID derived from that input? Using the NAPTR record as shown above, if I user [EMAIL PROTECTED], the RP could perform a transla

Re: Using email address as OpenID identifier

2008-04-01 Thread Dick Hardt
email providers. EHL From: Paul E. Jones [mailto:[EMAIL PROTECTED] Sent: Tuesday, April 01, 2008 11:42 PM To: Eran Hammer-Lahav; specs@openid.net Subject: RE: Using email address as OpenID identifier Eran, You’re entirely correct that this is not an OpenID issue, per se. In fact, not a single

RE: Using email address as OpenID identifier

2008-04-01 Thread Paul E. Jones
I don't see that as a requirement. Paul From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Eran Hammer-Lahav Sent: Wednesday, April 02, 2008 12:17 AM To: specs@openid.net Subject: RE: Using email address as OpenID identifier Take a look at http://www.hueniver

RE: Using email address as OpenID identifier

2008-04-01 Thread Paul E. Jones
ey do nothing but figure out which OP to direct the browser to. Paul From: Dick Hardt [mailto:[EMAIL PROTECTED] Sent: Tuesday, April 01, 2008 11:45 PM To: Brad Fitzpatrick Cc: Paul E. Jones; specs@openid.net Subject: Re: Using email address as OpenID identifier On 1-Apr-08, at 7:37 PM

RE: Using email address as OpenID identifier

2008-04-01 Thread Paul E. Jones
PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brad Fitzpatrick Sent: Tuesday, April 01, 2008 10:38 PM To: Paul E. Jones Cc: specs@openid.net Subject: Re: Using email address as OpenID identifier This has been discussed to death and really should be a FAQ by now, but it's not written up, so

Re: Using email address as OpenID identifier

2008-04-01 Thread James Henstridge
On 02/04/2008, Paul E. Jones <[EMAIL PROTECTED]> wrote: > Folks, > > I've seen discussion here and there on the use of the e-mail address as the > OpenID identifier. Perhaps this one says it best: > > http://www.majordojo.com/2007/02/what-openid-needs.php > > I share many of same opinions. If Ope

RE: Using email address as OpenID identifier

2008-04-01 Thread Eran Hammer-Lahav
iders. EHL From: Paul E. Jones [mailto:[EMAIL PROTECTED] Sent: Tuesday, April 01, 2008 11:42 PM To: Eran Hammer-Lahav; specs@openid.net Subject: RE: Using email address as OpenID identifier Eran, You're entirely correct that this is not an OpenID issue, per se. In fact, not a single word of

Re: Using email address as OpenID identifier

2008-04-01 Thread Dick Hardt
On 1-Apr-08, at 7:37 PM, Brad Fitzpatrick wrote: -- that said, with directed identity in OpenID 2.0, a user just needs to type in "yahoo.com", or press the pretty yahoo button. No typing. I think this is why we don't need to use emails. People are very familiar with typing in a URL in

RE: Using email address as OpenID identifier

2008-04-01 Thread Paul E. Jones
r format documented in RFC 822. Paul From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Eran Hammer-Lahav Sent: Tuesday, April 01, 2008 10:43 PM To: specs@openid.net Subject: RE: Using email address as OpenID identifier The beauty of the current OpenID spec is that anyon

RE: Using email address as OpenID identifier

2008-04-01 Thread Eran Hammer-Lahav
The beauty of the current OpenID spec is that anyone can implement it and go live. However, with email identifiers you need email providers to support it. If Google, Yahoo, AOL, or Microsoft announced they are adding such a feature, I am sure the others are likely to follow. Get 2 of these 4 and

Re: Using email address as OpenID identifier

2008-04-01 Thread Brad Fitzpatrick
This has been discussed to death and really should be a FAQ by now, but it's not written up, so I'll add a few points: -- we should discuss this as a generic email to URL mapping problem, and ignore what is done with that URL then. yes, it could be used as an OpenID -- that said, with directed i