[OpenID] Reconsidering http://openid different from https://openid

Dick Hardt dick at sxip.com
Wed Sep 19 20:01:17 UTC 2007


On 19-Sep-07, at 12:40 PM, Johannes Ernst wrote:

> I postulate that:
>
>  - 99% of internet users have only a very vague idea about the  
> difference between http and https, in particular as it relates to  
> OpenID. And in particular as so many RP's don't print the "http[s]"  
> prefix when they print a user name!

The vast majority of users understand the lock  / unlock icon.  
Correct that they don't know the HTTPS vs HTTP url information.

-- Dick




More information about the general mailing list