[OpenID] Trust + Security @ OpenID

Eddy Nigg (StartCom Ltd.) eddy_nigg at startcom.org
Thu Jul 19 17:31:02 UTC 2007


Hi Brendan,

Brendan Taylor wrote:
>
> How will you verify that I'm using the authentication method I claim I am?
Since no such body yet exists nor any discussion has been taken place at 
all on how it should function (foundation, board, staff, volunteers, 
mission, rules etc), I guess this is somewhat premature. Obviously those 
are all decisions which would have to be defined in a verification 
policy or guideline. But to answer the question, one method could be, by 
simply accessing the system by a representative  or volunteer and 
requesting an account. It might be that from time to time such a check 
will be randomly repeated perhaps?

Ideas for verification methods of the various bits could be interesting!


-- 
Regards
 
Signer:      Eddy Nigg, StartCom Ltd.
Jabber:      startcom at startcom.org
Phone:       +1.213.341.0390
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20070719/6d269d54/attachment-0002.htm>


More information about the general mailing list