[OpenID] Fwd: [OpenID Foundation] New Poll Opened

Breno de Medeiros breno at google.com
Fri Mar 20 01:54:55 UTC 2009


On Thu, Mar 19, 2009 at 6:27 PM, Eddy Nigg (StartCom Ltd.) <
eddy_nigg at startcom.org> wrote:

>  On 03/20/2009 03:11 AM, Allen Tom:
>
> The popup window will be REQUIRED to display the address bar. OPs will be
> strongly encouraged to educate their users to always pay attention to the
> URL of the address bar before entering their credentials.
>
>
> And how do you intend to govern that exactly?
>

The premise of the argument is flawed. If it were not possible to detect if
the window has a visible address bar, then there is nothing prevent RPs from
opening popups _today_ without address bars and asking the users to enter
their credentials. Would we blacklist them? Even if they are very popular?
Even if as a result of not having this UI potential RPs will decide to stick
with screen scrapping instead?

However, even though I do not agree with the basis for the argument, I will
say that _if_ the WG is formed, I will gladly contribute ideas and probably
open-source sample code as well.


>
>
>   Regards      Signer:  Eddy Nigg, StartCom Ltd. <http://www.startcom.org>
> Jabber:  startcom at startcom.org  Blog:  Join the Revolution!<http://blog.startcom.org>
> Phone:  +1.213.341.0390
>
>
> _______________________________________________
> general mailing list
> general at openid.net
> http://openid.net/mailman/listinfo/general
>
>


-- 
--Breno

+1 (650) 214-1007 desk
+1 (408) 212-0135 (Grand Central)
MTV-41-3 : 383-A
PST (GMT-8) / PDT(GMT-7)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20090319/fa8e9796/attachment-0002.htm>


More information about the general mailing list