RE: [security-services] [Fwd: Re: OpenID Mobile Profile?]

["Scott Cantor" <cantor.2@osu.edu>]

Paul Madsen wrote on 2009-02-03:
> FYI, the OpenID folks are contemplating an artifact mechanism to deal with
> mobile client limitations

I can't recall the last time I ran into a phone browser that didn't handle
POST fine, at least on a device anybody would actually use to access the
web.

> The difference between this flow and the SAML artifact binding is that
> in case of SAML, the artifact/ticket is created by the RP and OP goes
> and fetch the request from RP.

I don't think they understand that the binding goes either way...

-- Scott