[OpenID] Google OpenID IDP is now live

SitG Admin sysadmin at shadowsinthegarden.com
Wed Oct 29 20:32:03 UTC 2008


>First, I'm wary of the RP telling the OP how to display things.  It
>could open up even more phishing issues.  If the RP could tell the
>OP to display the login page in, say, Cherokee; then the end user
>who can't read the page but sees the "ok" button is likely to grant
>access when they didn't understand what they were doing.

There could be a few lines in each other supported language, by this 
button, saying "Don't click here if you can't understand the text 
above!"; but then there's extra text to *worry* the average user, who 
doesn't understand most of these other languages and doesn't want to 
click the button until they understand what the other text is 
signifying.

A set of lines in ALL supported languages, with the language 
currently in use at the top, trying to present the appearance that 
all these lines say the same thing?

-Shade



More information about the general mailing list