[OpenID] Too many providers... and here's one reason

[Nat Sakimura]

Just a point to note:
We have done some bolstering up of OpenID security based on our TX
presentation that I was made at iiw2007b. It has been implemented at JAL and
is in operation since May, doing transaction of some monetary value:
(typically from US$300 to $1000).

I was waiting for PAPE WG to complete its work as the "debugging" of WG
process, but since it is close to its completion now that I am starting to
prepare for a new WG for TX.

For those who has never heard of TX, it essentially is a contract
negotiation protocol extension based on public key cryptography with
(optional) third party assertion on the assurance level of each involved
parties and some consideration on the usage on mobile phones.

If you are interested, please chime in to be one of the proposer.

=nat

On Thu, Sep 18, 2008 at 12:55 AM, Eddy Nigg (StartCom Ltd.) <
eddy_nigg at startcom.org> wrote:

>  On 09/17/2008 06:45 PM, Dick Hardt:
>
> Actions speak louder then words here.
>
> The community needs to actively work on the issue(s) and resolve it/
> them. Then the marketing committee could do work to educate people
> about what had happened. The forming of a security review committee is
> a good first step.
>
>
>
>
>  +1
>
>   Regards      Signer:  Eddy Nigg, StartCom Ltd. <http://www.startcom.org>
> Jabber:  startcom at startcom.org  Blog:  Join the Revolution!<http://blog.startcom.org>
> Phone:  +1.213.341.0390
>
>
> _______________________________________________
> general mailing list
> general at openid.net
> http://openid.net/mailman/listinfo/general
>
>


-- 
Nat Sakimura (=nat)
http://www.sakimura.org/en/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20080920/2b75ff35/attachment-0002.htm>