[OpenID] Live Icons for visual recognition of IDP logos

[Peter Williams]

Think about the message its sending.

Who would want to put their family photos on a site they may not be able to access tomorrow (when some OP goes belly-up)?

Surely an RP needs to assure its users that there exists the means to replace the OP? The dotcom bust taught us that lots of service  companies do infact go belly-up, in the usual boom/bust cycle.

Would be strange if the UCI mission of openid facilitates data and identity portability, but then the failure engineering of the overall service still means you can STILL easily lose access.

Presumably, the RP might retain  the users email address(es) from the sreg handoff, so it can send access-recovery URLs  granting the users access WITHOUT using any of registered OP(s) for the account.

From: general-bounces at openid.net [mailto:general-bounces at openid.net] On Behalf Of Andrew Arnott
Sent: Wednesday, April 01, 2009 5:39 PM
To: Allen Tom
Cc: general
Subject: Re: [OpenID] Live Icons for visual recognition of IDP logos


[Peter Williams]
whether they trust them to just not go belly-up and thereby locking out their users from their accounts at that RP, some trust should be implied by an RP listing OP logos.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20090401/bd2fc024/attachment-0002.htm>