<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Robert Ott wrote:
<blockquote cite="mid:0CD4995C-778F-4B89-B53F-9118C31E2DF9@jnet.ch"
type="cite">
<pre wrap="">Now to the OpenID scenario. As SuisseID is based on standard X-509 certificates, there is no barrier that OpenID providers can accept these client certificates and map such certificates to already existing OpenID's. There are providers such as MyOpenID and our Clavid service providing such functionality for free. Thus, user centric OpenID scenario's are already possible today.
</pre>
</blockquote>
This direct model does not work for Danish citizens as the government
and the one company to which they have outsourced the ID management
(<a class="moz-txt-link-freetext" href="http://www.danid.dk">http://www.danid.dk</a>) requires payment from any company that accepts
client certificates from a user. This is clearly not a scalable model -
and in particular not workable as regards international use.<br>
<br>
<br>
Kick Willemse wrote:
<blockquote cite="mid:001601ca8181$bfa55c10$3ef01430$@nl" type="cite">
<pre wrap="">2. In the NL an additional role is introduced "authentication broker" to
make sure all the RP's do not have to implement all the different SAML IDP
services individually (And manage all national/ international contractual
relationships).
</pre>
</blockquote>
Not the least for the reason mentioned in my response to Robert, this
"Authentication broker" model is also what we are currently looking
into. <br>
<br>
<blockquote cite="mid:001601ca8181$bfa55c10$3ef01430$@nl" type="cite">
<pre wrap="">3. I think using the e-ID could help to keep OpenID decentralised.
Individuals could use their e-ID to certify their own openid server?</pre>
</blockquote>
Effective from 1 July 2010 danish citizens will no longer be able to
access their own private key. This will be stored centrally with DanID.
There has been lots of heated discussions in various IT related media
about this change.<br>
<br>
=henrik<!---->
</body>
</html>