[OpenID] Fwd: [OpenID Foundation] New Poll Opened

[Paul Madsen]

Allen, would not the fact that the content of the pop-up is specifically 
declared out of scope in the WG proposal preclude guiding the OP to  
provide such warnings or, for instance, display a sign-in seal, in the 
pop-up ?

Separately, a language hint from the RP is clearly orthogonal to the 
question of pop-up/full window. Are there implications for them to be 
conflated into a single extension, e.g. for metadata advertisement of 
extension support?

paul

Allen Tom wrote:
> The popup window will be REQUIRED to display the address bar. OPs will 
> be strongly encouraged to educate their users to always pay attention 
> to the URL of the address bar before entering their credentials.
>
> In particular, I think MySpace does an excellent job on their home page:
>
>
>       Always make sure you're visiting the real myspace.com!
>
>    1. Check the URL in your browser.
>    2. Make sure it begins with http://www.myspace.com/
>    3. If ANY OTHER PAGE asks for your info, DON'T LOG IN!
>
> Allen
>
>
> SitG Admin wrote:
>>> Phishing still is a major concern, however, we do not think that the 
>>> popup window significantly changes the phishing scenarios compared 
>>> to the existing full browser window UIs today.
>>
>> Are you speaking of full-size windows, here, or windows that have an 
>> address bar in them? Pop-up windows that are missing this indication 
>> of what site the user is at may reduce confusion by eliminating 
>> distractions, but they also take away from the user's awareness of 
>> what's going on.
>>
>> -Shade
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> general mailing list
> general at openid.net
> http://openid.net/mailman/listinfo/general
>   
> ------------------------------------------------------------------------
>
> No virus found in this incoming message.
> Checked by AVG. 
> Version: 7.5.557 / Virus Database: 270.11.19/2011 - Release Date: 19/03/2009 7:05 AM
>   

-- 
Paul Madsen
e:paulmadsen @ ntt-at.com
p:613-482-0432
m:613-282-8647
web:connectid.blogspot.com
ConnectID <http://feeds.feedburner.com/%7Er/blogspot/gMwy/%7E6/1>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20090320/e2ec6f7d/attachment-0002.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: gMwy.1.gif
Type: image/gif
Size: 21486 bytes
Desc: not available
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20090320/e2ec6f7d/attachment-0002.gif>