[OpenID] openid in a non-distributed situation?

Eddy Nigg (StartCom Ltd.) eddy_nigg at startcom.org
Thu Jul 19 10:36:45 UTC 2007


First of all I'm sorry for the rant, but I simply couldn't resist...I 
hope nobody got offended!

I think OpenID can be extremely useful as a SSO for internal networks or 
a set of inter-connected web sites! Obviously you trust your own IDP the 
most and have control over all aspects, including its users. In such a 
configuration the are no other OpenID providers involved which makes 
your network/IDP/RP trustworthy in your own eyes.

I don't know any of the sites you mentioned below and can't comment on 
it really.

Simon Willison wrote:
> On 7/19/07, Eddy Nigg (StartCom Ltd.) <eddy_nigg at startcom.org> wrote:
>>>   On the contrary, I think OpenID is ideally suited for this.
>>  Exactly! And the only way OpenID should be used currently  :-D   
>> (Sorry for
>> the rant)
>
> I thought your main complaint with OpenID is that the user could be
> coming from an untrustworthy provider such as
> http://www.jkg.in/openid/ , so OpenID provides no guarantee that a
> user wasn't a spammer. Do you also believe that this makes OpenID
> inappropriate for its Single Sign On roles, as seen with
> http://www.highrisehq.com/ , http://www.basecamphq.com/   ,
> http://ma.gnolia.com/ and many others?

-- 
Regards
 
Signer:      Eddy Nigg, StartCom Ltd.
Jabber:      startcom at startcom.org
Phone:       +1.213.341.0390
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20070719/0ab2a786/attachment-0002.htm>


More information about the general mailing list