[OpenID] OpenId downtime

[Martin Fick]

--- Martin Atkins <mart at degeneration.co.uk> wrote:
> Having high availability on a static
> website is a much easier task, since 
> you can spread load over multiple
> servers quite easily without any shared state
> between them.

Uh-Oh, DSl is down! ;)  (Not really an easy task.)

...
> I think the general answer is that you should host
> your identity URL and your provider(s) at places
> that you trust will provide high service 
> availability. 

It's one thing to trust an external service 
with one email account and another service
with your weblog...  With openid you have 
to trust one service with ACCESS to all of
your other services!!!  

Not only must they keep access available 
enough for you, but you are in effect 
allowing THEM access to all your openid 
services! Everyone who keeps suggesting 
this as a solution seems to be completely 
ignoring this VITAL difference!


...
> The freedom to choose is also the freedom to make
> bad choices, but 
> people have managed to get along okay so far with
> these other services 
> so I don't think OpenID is at any real disadvantage
> here other than that 
> it's much newer and so the available pool of service
> providers isn't as 
> large at this time. This will, if all goes to plan,
> change as the 
> technology is adopted.

And none of those other services that you hint 
at are alltime single points of failures for 
ALL of your other services!  This really is different.

Ciao,

-Martin



      ____________________________________________________________________________________
Never miss a thing.  Make Yahoo your home page. 
http://www.yahoo.com/r/hs