[OpenID] Use OpenID for Identification

larry drebes ltd at janrain.com
Fri May 16 18:07:27 UTC 2008


Christoph,
yes, myopenid.com uses the PAPE extension notify the RP when a user has used
the phone (CallVerifID) as a second factor.
larry-

On Fri, May 16, 2008 at 12:50 AM, Christoph Eunicke <christoph at eunicke.de>
wrote:

> Peter Williams schrieb:
> > Don't we already have it indirectly now, though, in the openid world?
> >
> >
> > If you use the myopenid phonefactor token, you are getting assurance
> > that the registered) phone is "controlled by" a national authority
> > (legally) - as given by the country code of the E.164 number.
>
> I was wondering if there already exists a way in OpenID to transport
> this extra piece of information (your phone number is valid, you have
> authenticate this request via phone) to the RP? Does myopenid pass this
> information already?
>
> BTW: You can get a SkypeIn-Number (chose any VoIP you like) without any
> relationship to a country, so claims made on numbers are not very strong
> :-(
>
>
> --
>   Christoph Eunicke
>   Computer Networks and Internet
>   Wilhelm Schickard Institute for Computer Science
>   University of Tuebingen, 72076 Tuebingen, Germany
>
> _______________________________________________
> general mailing list
> general at openid.net
> http://openid.net/mailman/listinfo/general
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20080516/25b1475b/attachment-0002.htm>


More information about the general mailing list