[OpenID] Announcing OpenID Authentication 2.0 - Implementor'sDraft 11

James A. Donald jamesd at echeque.com
Wed Jan 24 03:00:29 UTC 2007

Hallam-Baker, Phillip wrote:
 > If you change the browser you might as well really
 > change the browser and use a strong authentication
 > mechanism based on PKI

PK works, as for example SSH.

PKI is not working, and if it was ever going to work, we
would be there now.

The problem with the "I" in PKI is illustrated by the
following story.

: :	Alice introduces her son to Libby by telling
: :	Libby that her son is named "Jon". Libby then
: :	looks around for someone who claims to be
: :	named "Jon". Upon finding such a person,
: :	Libby asks the person for their driver's
: :	license, to confirm that the person's name is
: :	indeed "Jon".

This dog won't hunt.

          James A. Donald

More information about the general mailing list