[OpenID] Changes to the OpenID Foundation member page login

SitG Admin sysadmin at shadowsinthegarden.com
Sun Dec 7 23:38:13 UTC 2008


>Self-signed certificates don't provide any protection at all, 
>period. See 
><https://blog.startcom.org/?p=125>https://blog.startcom.org/?p=125

Since the Foundation will have access to members' physical mailing 
addresses when they join, would it be possible to mail them the 
needed key directly (on a CD or floppy) - and vice versa? Pick your 
courier - Postal Service, maybe Fedex - and just laugh when critics 
suggest MITM attacks.

-Shade
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20081207/399bc2bc/attachment-0002.htm>


More information about the general mailing list