[OpenID] New OP-MultiAuth Draft Published

David Fuelling sappenin at gmail.com
Sun Jan 18 22:09:15 UTC 2009


For anyone interested, I've put out a 2nd draft of my OP-MultiAuth idea.  I
think the first draft was pretty confusing, so hopefully this clarifies
things a bit more.

Wiki Page: http://wiki.openid.net/OP-MultiAuth
Actual Draft:
http://wiki.openid.net/f/openid-provider-multiauth-extension-1_0-2.html

In a nutshell, the idea here is to protect end-users against a "rogue OP" by
providing a mechanism for a Claimed Identifier to mandate that an RP get
valid auth assertions from two or more different OP's before giving access
to RP-protected resources.

Thanks!

David
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20090118/1d4a376b/attachment-0002.htm>


More information about the general mailing list