IRC Log for #openid on 2010-03-18
Timestamps are in UTC.
- [00:04:07] * flaccid (~vwen98@ppp59-167-167-106.static.internode.on.net) has joined #openid
- [00:15:50] * flaccid (~vwen98@ppp59-167-167-106.static.internode.on.net) Quit (Ping timeout: 260 seconds)
- [00:42:05] * shigeta (~shigeta@sakkgw2.sixapart.jp) has joined #openid
- [01:50:19] * Adremelech (~Adremelec@c-75-73-104-66.hsd1.mn.comcast.net) has joined #openid
- [02:11:37] * flaccid (~vwen98@ppp59-167-167-106.static.internode.on.net) has joined #openid
- [02:39:34] * flaccid (~vwen98@ppp59-167-167-106.static.internode.on.net) Quit (Ping timeout: 260 seconds)
- [02:44:25] * abraxas (~ronkorvin@p10103-ipngn1501marunouchi.tokyo.ocn.ne.jp) has joined #openid
- [03:09:18] * oxi (~oxi@unaffiliated/oxi) Quit (Quit: oxi)
- [03:37:22] * Adremelech (~Adremelec@c-75-73-104-66.hsd1.mn.comcast.net) Quit (Quit: Leaving)
- [03:40:31] * shigeta_ (~shigeta@sakkgw2.sixapart.jp) has joined #openid
- [03:43:16] * shigeta (~shigeta@sakkgw2.sixapart.jp) Quit (Ping timeout: 276 seconds)
- [04:10:34] * tjgillies (~tyler@66-233-243-26.war.clearwire-wmx.net) has joined #openid
- [04:26:45] * sn3t (~Ethan@c-76-107-220-12.hsd1.tn.comcast.net) has joined #openid
- [04:36:47] * flaccid (~vwen98@ppp59-167-167-106.static.internode.on.net) has joined #openid
- [04:43:31] * MacTed (~Thud@c-24-61-62-241.hsd1.ma.comcast.net) Quit (Ping timeout: 264 seconds)
- [04:46:23] * MacTed (~Thud@c-24-61-62-241.hsd1.ma.comcast.net) has joined #openid
- [05:02:22] * flaccid (~vwen98@ppp59-167-167-106.static.internode.on.net) Quit (Ping timeout: 260 seconds)
- [05:07:32] * flaccid (~vwen98@ppp59-167-167-106.static.internode.on.net) has joined #openid
- [05:18:41] * sn3t (~Ethan@c-76-107-220-12.hsd1.tn.comcast.net) Quit (*.net *.split)
- [05:18:41] * karstensrage (~karstensr@c-71-202-243-186.hsd1.ca.comcast.net) Quit (*.net *.split)
- [05:18:42] * bjornbjorn (drazq@numbat.inamo.no) Quit (*.net *.split)
- [05:18:42] * cao (~cao@p72023-ipbffx02marunouchi.tokyo.ocn.ne.jp) Quit (*.net *.split)
- [05:18:43] * ronny (ronny@pida/ronny) Quit (*.net *.split)
- [05:23:25] * flaccid (~vwen98@ppp59-167-167-106.static.internode.on.net) Quit (Ping timeout: 260 seconds)
- [05:51:47] * flaccid (~vwen98@ppp59-167-167-106.static.internode.on.net) has joined #openid
- [06:11:01] * flaccid (~vwen98@ppp59-167-167-106.static.internode.on.net) Quit (Ping timeout: 260 seconds)
- [06:22:00] * tjgillies (~tyler@66-233-243-26.war.clearwire-wmx.net) Quit (Ping timeout: 265 seconds)
- [07:13:38] * cao (~cao@p72023-ipbffx02marunouchi.tokyo.ocn.ne.jp) has joined #openid
- [07:13:39] * sn3t (~Ethan@c-76-107-220-12.hsd1.tn.comcast.net) has joined #openid
- [07:13:39] * karstensrage (~karstensr@c-71-202-243-186.hsd1.ca.comcast.net) has joined #openid
- [07:13:39] * bjornbjorn (drazq@numbat.inamo.no) has joined #openid
- [07:13:39] * ronny (ronny@pida/ronny) has joined #openid
- [08:04:34] * oxi (~oxi@unaffiliated/oxi) has joined #openid
- [08:52:05] * xpo (~xpo@bearstech/xpo) has joined #openid
- [09:22:06] * xpo (~xpo@bearstech/xpo) Quit (Quit: xpo)
- [10:21:52] * cao (~cao@p72023-ipbffx02marunouchi.tokyo.ocn.ne.jp) Quit (Read error: Connection reset by peer)
- [10:26:57] * cao (~cao@p72023-ipbffx02marunouchi.tokyo.ocn.ne.jp) has joined #openid
- [11:27:16] * abraxas (~ronkorvin@p10103-ipngn1501marunouchi.tokyo.ocn.ne.jp) Quit (Quit: abraxas)
- [12:20:02] * MacTed (~Thud@c-24-61-62-241.hsd1.ma.comcast.net) Quit ()
- [12:28:09] * acegiak (~acegiak@ppp118-210-123-81.lns20.adl2.internode.on.net) has joined #openid
- [12:29:29] <acegiak>
is there still anywhere i can diagnose problems with my openid?
- [13:19:53] * MacTed (~Thud@63.119.36.36) has joined #openid
- [13:23:52] * shigeta_ (~shigeta@sakkgw2.sixapart.jp) Quit (Quit: Leaving...)
- [13:30:52] * Kaliya (~Adium@dsl092-167-225.wdc2.dsl.speakeasy.net) has joined #openid
- [13:31:21] * karstensrage (~karstensr@c-71-202-243-186.hsd1.ca.comcast.net) Quit (Quit: Leaving)
- [13:34:15] * cao1 (~cao@p72023-ipbffx02marunouchi.tokyo.ocn.ne.jp) has joined #openid
- [13:35:02] * Kaliya (~Adium@dsl092-167-225.wdc2.dsl.speakeasy.net) Quit (Client Quit)
- [13:36:08] * acegiak (~acegiak@ppp118-210-123-81.lns20.adl2.internode.on.net) has left #openid
- [13:36:18] * cao (~cao@p72023-ipbffx02marunouchi.tokyo.ocn.ne.jp) Quit (Ping timeout: 240 seconds)
- [13:37:08] * xpo (~xpo@bearstech/xpo) has joined #openid
- [13:46:34] * qwp0 (~qwp0@gw.localnet.sk) has joined #openid
- [13:47:54] * xpo_air (~xpo@bearstech/xpo) has joined #openid
- [13:50:10] * xpo (~xpo@bearstech/xpo) Quit (Ping timeout: 264 seconds)
- [13:50:11] * xpo_air is now known as xpo
- [13:54:25] * qwp0` (~qwp0@gw.localnet.sk) has joined #openid
- [13:56:34] * qwp0 (~qwp0@gw.localnet.sk) Quit (Read error: Connection reset by peer)
- [14:00:59] * qwp0` (~qwp0@gw.localnet.sk) Quit (Ping timeout: 246 seconds)
- [14:34:34] * dreadyco (~wil@124-171-33-244.dyn.iinet.net.au) has joined #openid
- [14:34:53] * karstensrage (~chatzilla@ffnat.copart.com) has joined #openid
- [14:51:02] * ronny (ronny@pida/ronny) Quit (Ping timeout: 246 seconds)
- [15:06:55] * tbbrown (~tbbrown@tx-71-52-73-250.dhcp.embarqhsd.net) has joined #openid
- [15:23:46] * Ethan_ (~Ethan@c-76-107-220-12.hsd1.tn.comcast.net) has joined #openid
- [15:26:46] * sn3t (~Ethan@c-76-107-220-12.hsd1.tn.comcast.net) Quit (Ping timeout: 246 seconds)
- [15:45:11] * nickaugust (~anonymous@rrcs-71-42-53-182.se.biz.rr.com) has joined #openid
- [15:46:30] * dreadyco (~wil@124-171-33-244.dyn.iinet.net.au) Quit (Quit: dreadyco)
- [15:48:29] <nickaugust>
anyone expereinced with python-openid? I'm getting a "kvToSeq warning: Line 1 does not contain a colon: " error.
- [15:55:12] <nickaugust>
oh wait I added a '/' to the end of my URI as per http://whynotwiki.com/OpenID and now i'm getting "kvToSeq warning: Does not end in a newline:" yay! progress! :)
- [15:56:25] * Ac-town (~dymockd@osuosl/staff/actown) has left #openid
- [16:00:18] * xpo (~xpo@bearstech/xpo) Quit (Ping timeout: 260 seconds)
- [16:12:58] * xpo (~xpo@bearstech/xpo) has joined #openid
- [16:15:42] * MacTed (~Thud@63.119.36.36) Quit (Ping timeout: 260 seconds)
- [16:22:47] * MacTed (~Thud@63.119.36.36) has joined #openid
- [16:38:16] * gxgcristea (~gino@ip65-47-28-158.z28-47-65.customer.algx.net) has joined #openid
- [16:38:33] * gxgcristea (~gino@ip65-47-28-158.z28-47-65.customer.algx.net) has left #openid
- [16:59:31] * oxi (~oxi@unaffiliated/oxi) Quit (Quit: oxi)
- [17:50:13] * singpolyma (~singpolym@66.49.155.145) has left #openid
- [17:50:42] * singpolyma (~singpolym@66.49.155.145) has joined #openid
- [18:23:19] * oxi (~oxi@adsl-89-217-143-79.adslplus.ch) has joined #openid
- [18:23:19] * oxi (~oxi@adsl-89-217-143-79.adslplus.ch) Quit (Changing host)
- [18:23:19] * oxi (~oxi@unaffiliated/oxi) has joined #openid
- [18:30:22] * tbbrown (~tbbrown@tx-71-52-73-250.dhcp.embarqhsd.net) Quit (Ping timeout: 265 seconds)
- [18:52:37] * xpo (~xpo@bearstech/xpo) Quit (Read error: Connection reset by peer)
- [18:52:38] * xpo (~xpo@bearstech/xpo) has joined #openid
- [18:57:08] * xpo (~xpo@bearstech/xpo) Quit (Read error: Connection reset by peer)
- [18:58:37] * xpo (~xpo@bearstech/xpo) has joined #openid
- [19:05:14] * xpo (~xpo@bearstech/xpo) Quit (Quit: xpo)
- [19:22:39] * bungleirc (bungleirc@ssh.fchaps.com) has joined #openid
- [19:22:46] <bungleirc>
hi all
- [19:23:00] <bungleirc>
one question about openid... do i have to use discovery
- [19:23:24] <bungleirc>
why do we have discovery, if we can have direct urls?
- [19:24:08] <bungleirc>
e.g. can i use https://www.google.com/accounts/o8/ud directly without first querying https://www.google.com/accounts/o8/id?
- [19:29:26] <bungleirc>
on the other had openid is said to be chatty in dumy mode, but discovery phase is considered needed? i don't follow
- [19:31:14] <yangman>
discovery is also for finding the endpoint URL. you can't talk to the OP if you don't know where it is
- [19:34:30] <bungleirc>
but in case of google i always know?
- [19:34:48] <bungleirc>
why does google recommend to have separate discovery phase?
- [19:36:08] <bungleirc>
i know that some openid implementations give you url that is not op, but that you have to discover that first, it feels kinda dumb
- [19:37:07] <yangman>
the identity is always authoratative. if you assume OP locations, you're breaking protocol
- [19:37:09] <yangman>
simple as that
- [19:37:34] <bungleirc>
are you saying that google is breaking th protocol?
- [19:38:16] <yangman>
I'm not sure what about google's implementation you're talking about
- [19:38:37] <bungleirc>
http://code.google.com/apis/accounts/docs/OpenID.html
- [19:38:39] <bungleirc>
this
- [19:38:56] <yangman>
what about this?
- [19:38:59] <yangman>
be specific
- [19:40:01] <bungleirc>
well... google says to you that you have to discover using https://www.google.com/accounts/o8/id but it always gives you end point url https://www.google.com/accounts/o8/ud
- [19:40:10] <bungleirc>
so what's the pois in discovery here?
- [19:40:54] <bungleirc>
and you can authenticate anyone using this url
- [19:41:02] <yangman>
to retrieve the actual OpenID identity
- [19:42:13] <bungleirc>
hmm... i don't follow
- [19:42:18] <bungleirc>
can you elaborate more?
- [19:42:29] <yangman>
it's something people are calling directed identity
- [19:42:47] <bungleirc>
the google's one?
- [19:42:48] <yangman>
google generates unique IDs for each user/consumer pairing
- [19:43:18] <bungleirc>
well ok, but where do i need discovery with that then?
- [19:43:30] <bungleirc>
because every user has same directed url
- [19:43:31] <yangman>
so, in their first implementation, that single URL is used to discover this unique ID
- [19:44:05] <bungleirc>
well it's not... it always give you the same url that you can use
- [19:44:20] <yangman>
sounds like you're consumer is doing it wrong
- [19:44:33] <yangman>
the claimed_id coming back should be unique
- [19:45:12] <bungleirc>
of course it is but that's just after checkid_setup
- [19:45:26] <bungleirc>
but checkin_setup url is always https://www.google.com/accounts/o8/ud
- [19:46:42] <yangman>
well, nothing says that won't ever change
- [19:46:55] <yangman>
again, doing otherwise is breaking protocol
- [19:47:16] <bungleirc>
doing without discovery?
- [19:47:20] <yangman>
yes
- [19:48:51] <bungleirc>
and then we have all this complexity because people thought that doing dummy mode authentication check is chatty
- [19:50:43] <bungleirc>
this protocol looked kinda neat in a few years ago, now it's looking like ws-*
- [19:51:58] * Kaliya (~Adium@dsl092-167-225.wdc2.dsl.speakeasy.net) has joined #openid
- [19:52:17] * Kaliya (~Adium@dsl092-167-225.wdc2.dsl.speakeasy.net) has left #openid
- [19:52:43] <yangman>
I'm not sure why you're passing judgement against OpenID based on a single implementation
- [19:53:10] <yangman>
an implementation that a lot of people think isn't in the spirit of OpenID, and some claim to even be broken
- [19:53:33] <bungleirc>
ok... but they have all the identities, and face book
- [19:53:59] <yangman>
what about facebook? facebook has never done openid "right"
- [19:54:21] <bungleirc>
i kinda like google's implementation, but i was just thinking that can i leave discovery phase
- [19:54:35] * berkes (~ber@a83-163-58-51.adsl.xs4all.nl) Quit (Quit: Ex-Chat)
- [19:54:39] <bungleirc>
i know i can, but i was just looking at is there some bad side effects
- [19:54:46] <yangman>
and not everybody is google
- [19:55:01] <yangman>
plenty of people use a different OP service or run their own
- [20:00:08] <bungleirc>
google has also this profiles openid
- [20:00:09] * Kaliya (~Adium@dsl092-167-225.wdc2.dsl.speakeasy.net) has joined #openid
- [20:00:16] <bungleirc>
where you need to enter a name
- [20:00:22] <bungleirc>
or url if you wish
- [20:01:19] <yangman>
profile openid is more vanilla, afaik
- [20:01:34] <yangman>
no directed ID there
- [20:02:28] <bungleirc>
yes, and in that i perfectly understand discovery.... but then again... why cannot op answer in same location?
- [20:02:44] <yangman>
huh?
- [20:02:58] * Kaliya (~Adium@dsl092-167-225.wdc2.dsl.speakeasy.net) Quit (Client Quit)
- [20:04:19] <bungleirc>
yahoo and google seem to implement directed id
- [20:05:31] <bungleirc>
yangman: what huh about it? if i have xxx.idopen.com url why cannot i just send checkid_setup there... why i need to grap some yadis document that i have to parse and then move to another location
- [20:05:32] <yangman>
uh-huh
- [20:06:33] <yangman>
there is no guarantee the OP url won't change
- [20:06:52] * tjgillies (~tyler@66-233-243-26.war.clearwire-wmx.net) has joined #openid
- [20:07:03] <yangman>
there's also no guarantee any given identity is also an endpoint
- [20:07:50] <bungleirc>
well except if i give you guranteee?
- [20:08:14] <bungleirc>
why is it so hard to gve that gurantee... i don't see anything hard there
- [20:08:26] <yangman>
it's an explicit flexibility in the protocol
- [20:08:32] <yangman>
the identity URL is authoratative
- [20:08:43] <yangman>
it may decide to change the endpoint arbitrarily
- [20:13:19] * Ethan__ (~Ethan@c-76-107-220-12.hsd1.tn.comcast.net) has joined #openid
- [20:13:56] * Ethan_ (~Ethan@c-76-107-220-12.hsd1.tn.comcast.net) Quit (Ping timeout: 258 seconds)
- [20:14:03] <bungleirc>
well... the point seems to be that if you give ability to user to enter the url, then i see that discovery needs to happen, and there is no gurantees that the url is actually directed
- [20:14:14] <yangman>
ok, look. a very explicit design goal of the protocol is to decouple the identity URL from the server that talks OpenID
- [20:14:21] <bungleirc>
so that's why google propably recommends to use discovery
- [20:14:57] <yangman>
to make sure this mechanism is trustworthy enough, you need to do discovery
- [20:15:23] <bungleirc>
but entering a url in html page to do authentication will always feel very foreign to normal users
- [20:15:46] <yangman>
yse, people have been beating that dead horse for *years*
- [20:16:03] <bungleirc>
if there is a text that click this google icon to authenticate, i see that people might even use it
- [20:16:51] <bungleirc>
that's why i feel the future is in directed mode
- [20:17:46] <yangman>
you're looking at this from the persepctive of "what has people implemented today?" instead of "what was openid set out to solve 5 years ago, and what were the compromises to make it Good Enough?"
- [20:17:59] <bungleirc>
but that will most propably hurt decentralization idea and give identities to a few
- [20:18:25] <bungleirc>
i mean the directed thing
- [20:19:27] <bungleirc>
yep.... i'm just building my small site, maybe i will give users google and then my own proprietary login... i think that i will not confuse people with millions of options and urls and stuff like that
- [20:19:55] <yangman>
that's your freedom to choose
- [20:20:15] <yangman>
but it's not a sound nor logical basis to critise the protocol itself
- [20:20:29] <bungleirc>
i agree
- [20:20:31] <yangman>
also, doing something like that means you make it unusable for people like me that run their own OP
- [20:20:34] <yangman>
YMMV
- [20:21:11] <bungleirc>
yangman: this is hard... there is usability and then there is flexibility... i don't know
- [20:21:23] <yangman>
welcome to 2006 ;)
- [20:22:30] * singpolyma (~singpolym@66.49.155.145) has left #openid
- [20:22:49] <bungleirc>
stackoverflow's login doesnt look too hard, but their growd is technical oriented
- [20:36:11] * Kaliya (~Adium@dsl092-167-225.wdc2.dsl.speakeasy.net) has joined #openid
- [20:37:56] * Kaliya (~Adium@dsl092-167-225.wdc2.dsl.speakeasy.net) Quit (Client Quit)
- [21:25:32] * oxi (~oxi@unaffiliated/oxi) Quit (Quit: oxi)
- [21:26:53] * oxi (~oxi@unaffiliated/oxi) has joined #openid
- [21:32:00] * MacTed (~Thud@63.119.36.36) Quit ()
- [21:45:03] * xpo (~xpo@bearstech/xpo) has joined #openid
- [21:45:20] * Ethan__ is now known as snet
- [21:53:05] * tbbrown (~tbbrown@tx-71-52-73-250.dhcp.embarqhsd.net) has joined #openid
- [21:55:41] * Ethan_ (~Ethan@c-76-107-220-12.hsd1.tn.comcast.net) has joined #openid
- [21:58:51] * snet (~Ethan@c-76-107-220-12.hsd1.tn.comcast.net) Quit (Ping timeout: 248 seconds)
- [22:09:22] * Ethan_ (~Ethan@c-76-107-220-12.hsd1.tn.comcast.net) Quit (Quit: Leaving)
- [22:12:49] * tbbrown (~tbbrown@tx-71-52-73-250.dhcp.embarqhsd.net) Quit (Ping timeout: 260 seconds)
- [22:14:20] * nickaugust (~anonymous@rrcs-71-42-53-182.se.biz.rr.com) Quit (Quit: nickaugust)
- [22:21:18] * tbbrown (~tbbrown@tx-71-52-73-250.dhcp.embarqhsd.net) has joined #openid
- [22:32:15] * tjgillies (~tyler@66-233-243-26.war.clearwire-wmx.net) Quit (*.net *.split)
- [22:35:47] * tjgillies (~tyler@66-233-243-26.war.clearwire-wmx.net) has joined #openid
- [22:37:57] * tbbrown (~tbbrown@tx-71-52-73-250.dhcp.embarqhsd.net) Quit (Ping timeout: 240 seconds)
- [22:39:45] * tbbrown (~tbbrown@tx-71-52-73-250.dhcp.embarqhsd.net) has joined #openid
- [22:45:55] * tbbrown (~tbbrown@tx-71-52-73-250.dhcp.embarqhsd.net) Quit (*.net *.split)
- [22:45:55] * tjgillies (~tyler@66-233-243-26.war.clearwire-wmx.net) Quit (*.net *.split)
- [22:49:41] * tbbrown (~tbbrown@tx-71-52-73-250.dhcp.embarqhsd.net) has joined #openid
- [22:49:42] * tjgillies (~tyler@66-233-243-26.war.clearwire-wmx.net) has joined #openid
- [22:56:11] * tbbrown (~tbbrown@tx-71-52-73-250.dhcp.embarqhsd.net) Quit (*.net *.split)
- [22:56:11] * tjgillies (~tyler@66-233-243-26.war.clearwire-wmx.net) Quit (*.net *.split)
- [22:58:48] * tbbrown (~tbbrown@tx-71-52-73-250.dhcp.embarqhsd.net) has joined #openid
- [22:58:48] * tjgillies (~tyler@66-233-243-26.war.clearwire-wmx.net) has joined #openid
- [23:09:31] * OpenIDlogbot (~PircBot@mail.servernetwork.at) Quit (Ping timeout: 240 seconds)
- [23:13:36] * OpenIDlogbot (~PircBot@mail.servernetwork.at) has joined #openid
- [23:13:36] * Topic is 'http://openid.net | Got OpenID library questions? Check stackoverflow.com.'
- [23:13:36] * Set by yangman on Wed Oct 28 18:53:18 GMT+01:00 2009
- [23:13:40] * karstensrage (~chatzilla@ffnat.copart.com) Quit (Quit: ChatZilla 0.9.86 [Firefox 3.6/20100115144158])
- [23:23:57] * chuck_ (~charlie@yourwiki/staff/charlie) has joined #openid
- [23:23:58] * lexical (~kengyu@210.242.151.101) has joined #openid
- [23:26:24] * oxi (~oxi@unaffiliated/oxi) Quit (Ping timeout: 264 seconds)
- [23:26:24] * xpo (~xpo@bearstech/xpo) Quit (Ping timeout: 264 seconds)
- [23:26:25] * kengyu (~kengyu@210.242.151.101) Quit (Ping timeout: 264 seconds)
- [23:26:25] * chuck (~charlie@yourwiki/staff/charlie) Quit (Remote host closed the connection)
- [23:26:32] * oxi (~oxi@unaffiliated/oxi) has joined #openid
- [23:53:09] * MacTed (~Thud@c-24-61-62-241.hsd1.ma.comcast.net) has joined #openid
- [23:54:25] * tjgillies (~tyler@66-233-243-26.war.clearwire-wmx.net) Quit (Ping timeout: 276 seconds)
These logs were automatically created by OpenIDlogbot on
chat.freenode.net
using a modified version of the Java IRC LogBot.