logo       

Re: Yadis Spec .9 Change Proposal: Section 7.3.1 clarify multiple XRD: msg#00080

web.openid.general

Subject: Re: Yadis Spec .9 Change Proposal: Section 7.3.1 clarify multiple XRD

If there is only one XRD, why do we have this XML document rather then just some <link rel ...> tags for initial discovery?

On 10-Feb-06, at 11:37 AM, Drummond Reed wrote:

One factor that may mitigate this risk somewhat is that I see few reasons in
a YADIS context for the provider of an XRDS document to provide more than
one XRD element. The multi-XRD capability is intended for XRI client
resolvers and proxy resolvers who need to provide the results of a
resolution request for a delegated (multi-authority) XRI. While this
multi-XRD capability may also have uses in other potential resource
description or service discovery scenarios, in the typical YADIS scenario
the XRDS document will just be self-describing and thus not need to contain
more than one XRD element.

=Drummond

-----Original Message-----
From: yadis-bounces@xxxxxxxxxxxxxxx [mailto:yadis- bounces@xxxxxxxxxxxxxxx]
On Behalf Of Larry Drebes
Sent: Friday, February 10, 2006 8:47 AM
To: yadis@xxxxxxxxxxxxxxx
Subject: Re: Yadis Spec .9 Change Proposal: Section 7.3.1 clarify multiple
XRD


I hope you are wrong :). I suspect that the early use of YADIS will be
based around several common libraries and not one-off implementations.
This flaw is very easy to test for, and if broken, it should be easy to fix.
larry-

Martin Atkins wrote:
Unfortunately, this is one of those things that relying parties are
going to get wrong. I guarantee it!

Previous experience shows that there are two kinds of "wrong" when it
comes to implementing specs:
* You got it wrong so it doesn't work at all.
* You got it wrong so it works most of the time except in some funny
corner-cases and all of the spec authors are now scowling at you.

This is the latter. Implementors are (by and large) lazy. They'll
implement the bare minimum to make it look like it works. Most YADIS
resource descriptors are going to have only one XRD segment.
Implementors will probably use XPath like /XRDS/XRD/Service which will,
of course, match the service elements in *all* XRD segments.

So while it's obvious the YADIS spec has to take a definite position on
this subject, everyone should be prepared for the fact that almost every
relying party implementation is going to get this wrong and consider
what the implications of this are.

Cheers,
-Martin








<Prev in Thread] Current Thread [Next in Thread>
Google Custom Search

News | FAQ | advertise