SSL, DNSSEC and protected data enroute? (was Re: off topic - how many people use OpenID ?)

Fri Oct 20 20:43:21 UTC 2006

Josh Hoyt wrote:
> The specification will enumerate the trade-offs for using or not using
> different security technologies, and leave the decision up to
> implementers. Hans from VeriSign has designed security profiles for
> OpenID implementations.
Where?
>
> Basically, the idea is that the user (with the IdP and RP's help) will
> make decisions on what is secure enough
How?
> while adoption is still taking place, and eventually, there will be
> enforceable levels of security.
Excellent!
-- 
Regards

Signer:      Eddy Nigg, StartCom Ltd.
Phone:       +1.213.341.0390

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20061020/b91f699c/attachment-0002.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: eddy_nigg.vcf
Type: text/x-vcard
Size: 636 bytes
Desc: not available
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20061020/b91f699c/attachment-0002.vcf>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 7282 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20061020/b91f699c/attachment-0002.bin>