On 10/19/06, Dick Hardt <[EMAIL PROTECTED]> wrote:
> If you want that to happen, then you have to spec out that the RP is
> verifying the IdP-specific identifier and portable identifier binding
> when it receives it. That is not in the current proposal.

If that is not in there, then the proposal *is* worse than
one-identifier and needs to be fixed. I guess I need to read it more
closely. The primary reason that I prefer two-identifier is that the
relying party is more strict about what it's accepting.

Josh
_______________________________________________
specs mailing list
specs@openid.net
http://openid.net/mailman/listinfo/specs

Reply via email to