Re: On OpenID

On Mon, Sep 22, 2008 at 6:16 PM, Melanie <melanie(at)dunslane(dot)net> wrote:
> I assume you techies are well aware that openid has major problems, like
> seen here: http://idcorner.org/2007/08/22/the-problems-with-openid/

And a response to that:

http://daveman692.livejournal.com/310578.html
(David Recordon works for SixApart andleads a non-profit working on open-web
issues:
http://openwebfoundation.org/2008/07/announcing-the-open-web-foundation.html
)

Buried in David's post:

Whilst this paper has presented a number of attacks against OpenID, it still
remains the only viable option for the Internet-wide SSO system. Some of the
attacks presented are either partially solved already or can be solved with
relative ease.

OpenID is evolving. Some criticism is valid, but let's not throw out the
baby with the bath water.

-selena

--
Selena Deckelmann
PDXPUG - http://pugs.postgresql.org/pdx
Me - http://www.chesnok.com/daily