logo       

Re: Yadis Spec .9 Change Proposal: Section 7.3.1 clarify multiple XRD: msg#00071

web.openid.general

Subject: Re: Yadis Spec .9 Change Proposal: Section 7.3.1 clarify multiple XRD


I hope you are wrong :). I suspect that the early use of YADIS will be based around several common libraries and not one-off implementations. This flaw is very easy to test for, and if broken, it should be easy to fix.
larry-

Martin Atkins wrote:
Unfortunately, this is one of those things that relying parties are
going to get wrong. I guarantee it!

Previous experience shows that there are two kinds of "wrong" when it
comes to implementing specs:
* You got it wrong so it doesn't work at all.
* You got it wrong so it works most of the time except in some funny
corner-cases and all of the spec authors are now scowling at you.

This is the latter. Implementors are (by and large) lazy. They'll
implement the bare minimum to make it look like it works. Most YADIS
resource descriptors are going to have only one XRD segment.
Implementors will probably use XPath like /XRDS/XRD/Service which will,
of course, match the service elements in *all* XRD segments.

So while it's obvious the YADIS spec has to take a definite position on
this subject, everyone should be prepared for the fact that almost every
relying party implementation is going to get this wrong and consider
what the implications of this are.

Cheers,
-Martin




<Prev in Thread] Current Thread [Next in Thread>
Google Custom Search

News | FAQ | advertise