Identity/FormatUpgrade

Format-Upgrade Analysis

To safely deploy changes in any of the serialized browserid data formats (serialized public keys, IdP records, certificates, and signed assertions), we need either be sure that the eventual recipient of these messages will be able to understand them, or we need to be able to detect when they cannot and somehow fall back to an older version.

The message flow in BrowserID looks roughly like the following: