• Realm instead of trust_root
  
  Deletions:
  - Investigate YARIS/XRI stuff
• Realm instead of trust_root
  
  

  ---

  
  Edited on 2008-04-19 04:25:19 by ChrisSmith
  
  Additions:
  CategoryPoidsy
  
  

  ---

  
  Edited on 2008-02-26 18:53:58 by ChrisSmith
  
  Additions:
  - Revoke all old keys periodically
• Alternate data store
  
  

  ---

  
  Edited on 2008-02-26 18:43:32 by ChrisSmith
  
  Additions:
  - Tidy up keymanager
  
  Deletions:
  - Tidy up keymanager
  
  

  ---

  
  Edited on 2008-02-26 16:03:54 by ChrisSmith
  
  Additions:
  - Move D-H processing to association routine
  
  Deletions:
  - Move D-H processing to association routine
  
  

  ---

  
  Edited on 2008-02-26 03:44:40 by ChrisSmith
  
  Additions:
  - Move D-H processing to association routine
• Tidy up bigmath library
  
  

  ---

  
  Edited on 2008-02-26 01:03:13 by ChrisSmith
  
  Additions:
  - Tidy up processor code
• Look at how authentication logic is abstracted
• Tidy up keymanager
  
  Deletions:
  - Tidy up processor code
  
  

  ---

  
  Edited on 2008-02-25 21:23:37 by ChrisSmith
  
  Additions:
  - Add support for D-H key exchange
  
  Deletions:
  - Add support for D-H key exchange
  
  

  ---

  
  Edited on 2008-02-24 16:27:11 by ChrisSmith
  
  Deletions:
  - Validate invalid assoc handle messages
• Properly normalise URLs?
• Decode entities in links
• Ability to send openid_setup straight off
• Support sending trust root/URL
• AJAXy demo
• User-friendly errors / error codes
• URL normaliser unit test
• Support SHA256
• Form field should be openid_identifier
• Support openid2.provider and openid2.local_id link types
• Send the claimed ID to the IdP
  
  

  ---

  
  Edited on 2008-02-24 07:17:41 by ChrisSmith
  
  Additions:
  - Anti-phishing message on the main page
  
  

  ---

  
  Edited on 2008-02-24 07:17:21 by ChrisSmith
  
  Additions:
  - List of authorised sites (options to revoke auth)
• List of recent sites
  
  

  ---

  
  Edited on 2008-02-24 06:31:07 by ChrisSmith
  
  Additions:
  - Send the claimed ID to the IdP
  
  Deletions:
  - Send the claimed ID to the IdP
  
  

  ---

  
  Edited on 2008-02-24 06:25:20 by ChrisSmith
  
  Additions:
  - Validate invalid assoc handle messages
• Tidy up processor code
• Realm instead of trust_root
  
  Deletions:
  - Validate invalid assoc handle messages
• Different trust_root name?
  
  

  ---

  
  Edited on 2008-02-24 06:09:27 by ChrisSmith
  
  Additions:
  - Support openid2.provider and openid2.local_id link types
  
  Deletions:
  - Support openid2.provider and openid2.local_id link types
  
  

  ---

  
  Edited on 2008-02-24 06:05:01 by ChrisSmith
  
  Additions:
  - Form field should be openid_identifier
  
  Deletions:
  - Form field should be openid_identifier
  
  

  ---

  
  Edited on 2008-02-24 06:03:34 by ChrisSmith
  
  Additions:
  - Support SHA256
  
  Deletions:
  - Support SHA256
  
  

  ---

  
  Edited on 2008-02-23 22:02:38 by ChrisSmith
  
  Additions:
  - URL normaliser unit test
  
  Deletions:
  - URL normaliser unit test
  
  

  ---

  
  Edited on 2008-02-23 21:38:42 by ChrisSmith
  
  Additions:
  - URL normaliser unit test
  
  

  ---

  
  Edited on 2008-02-23 21:28:48 by ChrisSmith
  
  Additions:
  - User-friendly errors / error codes
  
  Deletions:
  - Support putting session id in the url
• User-friendly errors / error codes
  
  

  ---

  
  Oldest known version of this page was edited on 2008-02-23 20:03:14 by ChrisSmith []
  
  Page view:

  OpenID todo list (edit)

• Add support for D-H key exchange
• Validate invalid assoc handle messages
• Properly normalise URLs?
• Decode entities in links
• Ability to send openid_setup straight off
• Support sending trust root/URL
• Support putting session id in the url
• AJAXy demo
• User-friendly errors / error codes

Version 2.0 changes

• Support SHA256
• Form field should be openid_identifier
• Support openid2.provider and openid2.local_id link types
• Association attempts may fail
• Send the claimed ID to the IdP
• Verify openid.op_endpoint
• Investigate YARIS/XRI stuff
• Different trust_root name?

Provider requirements

• Check with user it's ok to continue
• Show as much information about the server as possible (associate/dumb mode, trust root, return url)
• Allow the user to select which (if any) of the sreg details are returned
• Ability to remember both login and sreg details for each server (based on trust root?)