[OpenID] What are openids weaknesses?

Peter Williams pwilliams at rapattoni.com
Sun Sep 2 13:05:51 UTC 2007


How do you think folks logged on to  a half billion accounts at Microsoft Hotmail over the last 10 years?

 

How do you think a folks logon to Microsoft IM?

 

It’s just sp-initiated websso, on the internet today. Go try it. Go spy on the modern redirects. The std is ws-federation passive. OpenID like in flow.

 

We are still deciding as a community whether realtor.com shall support webSSO, from the likes of IDPs like Live.com, Yahoo,  etc. We have rather a lot of consumer traffic, ourselves you know -- speaking for the wider, realty-related community It would make some sense that the major portals federate with such major relying party destination sites.  

 

First focus on websso. Then we decide the protocol: saml, ws-fed, openid. In all likelihood, its cheap enough to do all three. They each have interesting technical properties.

 

 

From: Eddy Nigg (StartCom Ltd.) [mailto:eddy_nigg at startcom.org] 
Sent: Sunday, September 02, 2007 5:54 AM
To: Peter Williams
Cc: OpenID List
Subject: Re: [OpenID] What are openids weaknesses?

 

Peter Williams wrote: 

 

[Peter Williams] 

But then one might ask, where is the adoption by the masses of both openid or saml? Certainly nothing I'm aware of - or better, not many choose to rely on it, except in a closed relying relation...i.e. I trust my own delegation point, not that of others.

-- 

Regards 

 

Signer: 

Eddy Nigg, StartCom Ltd. <http://www.startcom.org> 

Jabber: 

startcom at startcom.org

Blog: 

Join the Revolution! <http://blog.startcom.org> 

Phone: 

+1.213.341.0390

 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20070902/b2f95c7b/attachment-0002.htm>


More information about the general mailing list