Note on delegation of Google profile openids

diff --git a/doc/forum/google_openid_broken__63__.mdwn b/doc/forum/google_openid_broken__63__.mdwn
index 53713ce1084dd52a5aeabef67b7c389161ffccde..68b44f2c1e94252a040ebd6f0b5f4b0836d87e63 100644 (file)
--- a/doc/forum/google_openid_broken__63__.mdwn
+++ b/doc/forum/google_openid_broken__63__.mdwn
@@ -2,6 +2,8 @@ Now that google supports using thier profiles as OpenIDs, that can be used
 directly to sign into ikiwiki. Just use, for example, 
 <http://www.google.com/profiles/joeyhess> . Tested and it works. --[[Joey]] 
 
+> This seems to work fine if you use the profile directly as an OpenID.  It doesn't seem to work with delegation.  From that I can see, this is a deliberate decision by Google for security reasons.  See the response [here](http://groups.google.com/group/google-federated-login-api/browse_thread/thread/825067789537568c/23451a68c8b8b057?show_docid=23451a68c8b8b057). -- [[Will]]
+
 ## historical discussion
 
 when I login via to this wiki (or ours) via Google's OpenID, I get this error: