[OpenID] Rule of thumb

Recordon, David drecordon at verisign.com
Sat Jul 21 23:22:26 UTC 2007


My view is just as we talk about one of the RP benefits to using OpenID
is that Providers will be experts in user management so that you as an
RP can focus on building your cool app, I think we'll also see
reputation and trust experts emerge as services.  Thus a RP will choose
one, or more, of them they wish to rely on when interacting with new
OpenIDs.  Just like there are many types of RBLs for email and an email
administrator chooses which one they'd like to use.

--David

-----Original Message-----
From: general-bounces at openid.net [mailto:general-bounces at openid.net] On
Behalf Of Eric Norman
Sent: Friday, July 13, 2007 12:21 PM
To: OpenID - General
Subject: Re: [OpenID] Rule of thumb


On Jul 13, 2007, at 11:42 AM, Eddy Nigg (StartCom Ltd.) wrote:

> David from Verisign suggested, that "some" third party organizations 
> will perform these services (as for example Webtrust does for CAs), 
> however I'd certainly prefer that to be something which would come 
> from the OpenID community itself. Or in other words, I think some of 
> us should come together and found/operate this service.

Methinks there's an awful lot of RPs that would certainly
prefer not.  They would view this as the fox guarding the
henhouse, to use an old adage.

After all, they are the ones with something at risk.  So
they're not going to listen much if the OpenID community
starts telling them how to do their risk management.  And
rightly so.

Eric Norman
http://ejnorman.blogspot.com

_______________________________________________
general mailing list
general at openid.net
http://openid.net/mailman/listinfo/general



More information about the general mailing list