[OpenID] Negotiating a backup OP from the current OP

SitG Admin sysadmin at shadowsinthegarden.com
Sat Jun 28 01:49:35 UTC 2008


>Is there a way for RPs to verify an OP's claim made via PAPE?  I 
>mean, I can write an OP that uses PAPE to say I'm Verisign 
>authorized.  But how can an RP verify that claim?

By using Verisign's public key to decrypt the assertion?

(This assumes that Verisign can keep its private key secure.)

-Shade
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20080627/93f8dc23/attachment-0002.htm>


More information about the general mailing list