[OpenID] Fwd: OpenID Spoofing

[Rowan Kerr]

On 1/12/07, Dmitry Shechtman <damnian at gmail.com> wrote:
> Now that we've established that by "OpenID spoofing" nobody meant anything
> more than plain phishing, I think I found a solution:
>
> http://blog.phpbb.cc/2007/01/12/external-authentication-and-otp/

Mugshot.org uses email and aim to send login tokens. Maybe there are
some RedHat peeps hanging around to say how well this has been working
for them.