[OpenID] Trust + Security @ OpenID

Chris Obdam chris.obdam at holder.nl
Mon Jul 16 15:58:32 UTC 2007


@Scott: You can support a centralized list of certified OpenID  
servers, as long as it isn't part of the OpenID foundation? :-)

On 16-jul-2007, at 17:51, Scott Kveton wrote:

>>> Personally I don't see a problem with it. I'd love to rely on an  
>>> effort lead
>>> by the OpenID Foundation.
>>
>> I believe that a centralised blacklisting or whitelisting effort lead
>> by the OpenID foundation would not only betray the original
>> decentralised principles of OpenID, but would also greatly harm
>> adoption of the standard. A principle reason OpenID stands to gain
>> adoption where other mechanisms (such as TypeKey and Passport) have
>> failed is that OpenID is politically neutral - there's no central
>> organisation running things, which means that there are no political
>> reasons not to get involved ("I would have implemented OpenID, but I
>> don't trust X who is on the board that manages the blacklisting
>> project").
>
> The OpenID Foundation has been created to protect and manage the
> community assets of the OpenID community.  It hasn't been setup to
> bless any projects, dictate the path of the technology or  firmly
> define any new services or policies that don't tie to its specific
> mission.
>
> Personally, I think that how social networking, white/black listing
> and the whole host of other issues are dealt with are specifically up
> to the community to come up with and not the foundation.
>
> - Scott
> _______________________________________________
> general mailing list
> general at openid.net
> http://openid.net/mailman/listinfo/general
>



More information about the general mailing list