[OpenID] Combining Google & Yahoo user experience research

Martin Atkins mart at degeneration.co.uk
Mon Oct 20 06:44:55 UTC 2008


alavillipraveen at aol.com wrote:
>   that's because you (a human being) trusted the bank website and chose 
> to give away your PII. But when the bank gets a request from an OP that 
> says www.i_am_the_most_secure_openid_provider.com, saying yes this is 
> Brandon, how can the bank trust it ? 

Isn't it more important that you (a human being) trust both the bank and 
the OP? My bank trusting a particular OpenID provider doesn't really 
help me in any way if I don't trust it myself. To be honest, I don't 
care what my bank trusts. I care what I trust.




More information about the general mailing list