[OpenID] OpenID's effect on CAPTCHA

Nate Klingenstein ndk at internet2.edu
Fri Mar 27 02:35:39 UTC 2009


nick,

Higher ed has long mused about third parties capable of providing a  
higher level of identity assurance.  Banks were an obvious initial  
candidate, since they're already entrusted with safeguarding personal  
data, financial assets, and other valuables.  Recent events have, um,  
lessened their appeal for this role in many countries' public eyes,  
but it still makes sense.

Governments are another possibility, as they already issue various  
identification materials for citizens, e.g. passports, but national  
ID schemes that encroach on being mandatory are also extremely  
sensitive territory.

A few start-ups have also dedicated themselves to identity vetting,  
but it's a pretty difficult market to create unless you can move in  
size.  I'm not aware of any of these being particularly successful yet.

All these mechanisms rely on an ability of RP's to widely identify  
the OP's, e.g. banks, who are able to assert such information, and  
the world has 10,000+ banks.  This means trust fabric and discovery  
need to be addressed first, or we have to settle for a few big,  
trusted authorities.

A separate but related problem is that any individual's identity data  
is scattered throughout hundreds of places.  My university is  
authoritative for my student number and class enrollment, but my  
government is authoritative for my citizenship.  Someday, federated  
identity will probably want to solve that problem -- attribute  
aggregation -- too.  It's a ways off yet, though.

Take care,
Nate.

On 27 Mar 2009, at 00:47, nicholas.g.lawrence at mainroads.qld.gov.au  
wrote:

> Perhaps an agency, such as a bank, be able to state with authority
> that you are a human being?
>
> It could even state that you are above a certain age.
>
> This could be in addition to the normal services a bank provides.
>
> nick

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20090327/c656149b/attachment-0002.htm>


More information about the general mailing list