OpenID security

James A. Donald jamesd at echeque.com
Wed Oct 25 00:21:32 UTC 2006


     --
Hans Granqvist wrote:
 > One way to handle all these requirements in a protocol is to:
 >
 > 1.  specify multiple levels of security,
 > 2.  specify a way to agree on a level, and
 > 3.  specify how to enforce that level

Been tried many times, really does not work.

     --digsig
          James A. Donald
      6YeGpsZR+nOTh/cGwvITnSR3TdzclVpR0+pr3YYQdkG
      32uxEzyMoFYSFC9KwvtERmj6ARNHZClH+8mR+qNP
      4ispdo9FbRQmBi4Agg4lDrqd62aCBmN4JgKqMH3H6



More information about the general mailing list