[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Full-disclosure] OpenID. The future of authentication on the web?
- Subject: Re: [Full-disclosure] OpenID. The future of authentication on the web?
- From: Gorn <gorn@xxxxxxxxx>
- Date: Mon, 24 Mar 2008 10:51:49 +0100
Petko D. Petkov wrote:
>>
>
> As I said, if you don't trust public OpenID providers, roll your own.
> It is very, very, very easy.
>
You seem to miss one point, in the current online environment you are
not talking about 5 or 6 id/credentials but more like 20 to 30.
(remember each blog you post to, each mailing list each web store
requires its own id/credentials.) OpenID provides for the possibility to
group these id's by function and select the correct provider with the
safeguards you want for each group. An OpenID for money related
transactions would need more safeguards as an OpenID for lets say full
disclosure ;-)
>
>
>
FG
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/