[OpenID] Japan Report 2008-12-13

Mike Kirkwood mike at polka.com
Sat Dec 13 19:28:24 UTC 2008


"Challenges through non-OpenID channels, I think - it's
too easy to fake return addresses or caller ID to safely issue
challenges through OpenID and then expect that whatever non-OpenID
response comes that appears to be the user, really is!"

Seems like some partnerships or creation of key information registries (public, private, other) will be important.   Perhaps OIDF could be a place to make a call the the holders of these processes (we'll exchange you the user, if you exchange the phone number registry).  Again, in very loose terms, this type of issue exists with any outside processes.

Integrating with logistics is going to be a prime use case in the commerce track.  E.G., in many use-cases in enterprise data of customers, "shipping address" is driver of the process, and a key point for learning repeat information with that entity.   That information can help bundle the process for the party, and has to be relied on.  Another piece of information that becomes critical when bringing in an FedEx/UPS is phone number.    Coming from the iPhone populated world, it would very possible to see Location as a part of the OpenID stack (or an endpoint for it).

Second, I think when we consider all of the enterprise touch-points, there are many non-OpenID responses, perhaps the majority of them.   Luckily a lot of opportunity exists around OAuth for staring a channel, but there are many processes and dollars that the user information about me today that is passing is based on my name, account, phone number, shipping address.   Somehow, it would be nice the business processes around the stack require phone number, physical address, and even other things like digital signature, it's important for it to be bubbled up and addressable in the stack to get economy of scale.

Perhaps OpenID can represent this in it's core ideas around bundling itself with the stack.


--Mike



-Shade
_______________________________________________
general mailing list
general at openid.net
http://openid.net/mailman/listinfo/general



More information about the general mailing list