<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Hi Simon,<br>
<br>
Simon Willison wrote:
<blockquote
cite="mid:a3b4f3b60707081339w43d57815m21270364e4f4e929@mail.gmail.com"
type="cite"><br>
"""
<br>
What about spam?
<br>
<br>
Again, this is not a trust system.
<br>
<br>
Somebody could run their own identity server that says they're
<br>
<a class="moz-txt-link-freetext" href="http://spammer.example.com/000001/">http://spammer.example.com/000001/</a> all the way to
<br>
<a class="moz-txt-link-freetext" href="http://spammer.example.com/999999/">http://spammer.example.com/999999/</a> and that's not a goal of this
<br>
system to prevent. It's another layer's job to say the identities with
<br>
URL spammer.example.com/* is a spammer, or some ID server is a known
<br>
spammer, or some particular identity is a known spammer.
<br>
"""
<br>
</blockquote>
Right! It's that additional layer I'm talking about...<br>
<blockquote
cite="mid:a3b4f3b60707081339w43d57815m21270364e4f4e929@mail.gmail.com"
type="cite"><br>
OpenID was never intended to provide an assurance that an OpenID
<br>
doesn't belong to a spammer. That's OK; neither are regular accounts
<br>
created with a username and password. If you want to prevent automated
<br>
spammers from signing in to your blog/forum using OpenID, you need to
<br>
present a user with a CAPTCHA the first time they sign in with a
<br>
specific OpenID.
<br>
</blockquote>
So I don't need OpenID therefore, right? No benefit for me as site
operator and relying party...why bother...?<br>
<br>
<div class="moz-signature">-- <br>
<div><font face="Arial" size="2">Regards</font></div>
<div><font face="Arial" size="2"> </font></div>
<div><font face="Arial" size="2">Signer: Eddy Nigg, StartCom Ltd.</font></div>
<div><font face="Arial" size="2">Jabber: <a class="moz-txt-link-abbreviated" href="mailto:startcom@startcom.org">startcom@startcom.org</a></font></div>
<div><font face="Arial" size="2">Phone: +1.213.341.0390</font></div>
</div>
</body>
</html>