[OpenID] Changes to the OpenID Foundation member page login

Eddy Nigg (StartCom Ltd.) eddy_nigg at startcom.org
Mon Dec 8 00:16:57 UTC 2008


On 12/08/2008 01:38 AM, SitG Admin:
> >Self-signed certificates don't provide any protection at all, period. 
> See https://blog.startcom.org/?p=125
>
> Since the Foundation will have access to members' physical mailing 
> addresses when they join, would it be possible to mail them the needed 
> key directly (on a CD or floppy) - and vice versa? Pick your courier - 
> Postal Service, maybe Fedex - and just laugh when critics suggest MITM 
> attacks.
If it's worth the hassle, then yes, this would be the right approach!


Regards
Signer: 	Eddy Nigg, StartCom Ltd. <http://www.startcom.org>
Jabber: 	startcom at startcom.org <xmpp:startcom at startcom.org>
Blog: 	Join the Revolution! <http://blog.startcom.org>
Phone: 	+1.213.341.0390


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20081208/645e7c6f/attachment-0002.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6724 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20081208/645e7c6f/attachment-0002.bin>


More information about the general mailing list