[OpenID] Trust + Security @ OpenID

[Scott Kveton]

> > Personally I don't see a problem with it. I'd love to rely on an effort lead
> > by the OpenID Foundation.
>
> I believe that a centralised blacklisting or whitelisting effort lead
> by the OpenID foundation would not only betray the original
> decentralised principles of OpenID, but would also greatly harm
> adoption of the standard. A principle reason OpenID stands to gain
> adoption where other mechanisms (such as TypeKey and Passport) have
> failed is that OpenID is politically neutral - there's no central
> organisation running things, which means that there are no political
> reasons not to get involved ("I would have implemented OpenID, but I
> don't trust X who is on the board that manages the blacklisting
> project").

The OpenID Foundation has been created to protect and manage the
community assets of the OpenID community.  It hasn't been setup to
bless any projects, dictate the path of the technology or  firmly
define any new services or policies that don't tie to its specific
mission.

Personally, I think that how social networking, white/black listing
and the whole host of other issues are dealt with are specifically up
to the community to come up with and not the foundation.

- Scott