security

[Josh Hoyt]

On 10/23/06, Chris Drake <christopher at pobox.com> wrote:
> DH> compromised. No personal data is moved in the connection between the
> DH> user and the RP.
>
> ... except when using the Simple Registration Extension

The link over which the registration data flows is the same link over
which it would flow if the user had to enter the data manually.
Whether using Simple Registration or filling out a form, it's up to
the user to decide whether to provide the data to the site over that
link. Simple Registration just saves the user some typing.

Josh