Yubico Forum

Re: What kind of data is transmitted to the client?

2011-02-16T13:39:45+01:00

This is one big failing with OpenID IMO in that there's no official test site where you can check what an OpenID provider is passing on.

I found some code that is intended as a demo for an OpenID client and have set it up at http://openid.longlandclan.yi.org/test/ but I notice it doesn't handle delegated OpenIDs properly. You're certainly welcome to give it a shot there and play with it.

If I figure out how to make the library reveal more information about what it was told, I'll update it.

Statistics: Posted by Redhatter — Wed Feb 16, 2011 1:39 pm

Re: What kind of data is transmitted to the client?

2011-02-10T21:02:16+01:00

The OpenID server does not have any personal information at all except for what the user is providing by using the service -- i.e., your openid url and your yubikey prefix. The server only checks that it gets a valid YubiKey OTP for the requested yubikey. The source code is available from:

http://code.google.com/p/yubico-openid-server/

Hope this clarifies, let me know if you have additional questions.

/Simon

Statistics: Posted by Simon — Thu Feb 10, 2011 9:02 pm

What kind of data is transmitted to the client?

2011-02-09T15:33:39+01:00

What kind of personal data ist transmitted from the yubico server to the client?

Is there some test client on the net where I can see what personal data is transmitted from some OpenID?

Statistics: Posted by jochen — Wed Feb 09, 2011 3:33 pm