<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Hi Eric,<br>
<br>
Eric Norman wrote:
<blockquote cite="mid:6a7c029ee818097854d3d131caecfafa@doit.wisc.edu"
type="cite">
<pre wrap=""><!---->
Methinks there's an awful lot of RPs that would certainly
prefer not. </pre>
</blockquote>
I don't suppose this to be forced on anybody! But as anybody can chose
to add CAs to the browser or one add various white and black lists to
the mail server, one could opt to make it a requirement or not. I'd
view it as a service, confirming the adherence of an IDP to certain
standards and rules (See the various extensions in draft right now).<br>
<blockquote cite="mid:6a7c029ee818097854d3d131caecfafa@doit.wisc.edu"
type="cite">
<pre wrap="">They would view this as the fox guarding the
henhouse, to use an old adage.
</pre>
</blockquote>
It depends who is going to be the fox....;-)<br>
Except what's wrong with the community taking care of this?<br>
<blockquote cite="mid:6a7c029ee818097854d3d131caecfafa@doit.wisc.edu"
type="cite">
<pre wrap="">
After all, they are the ones with something at risk. So
they're not going to listen much if the OpenID community
starts telling them how to do their risk management. And
rightly so.</pre>
</blockquote>
I for one can't make use of OpenID in it's current form, except if
strictly trusting only our own IDP. I'm sure there are many more out
there hesitating to adopt OpenID for this very reason. An RP in the
OpenID world is usually a web site, not a person! Which makes accepting
an IDP not a case-to-case based decision, but rather accept all or
nothing. Nor do I have the intention to screen every new incoming IDP
upon each request.<br>
<br>
Perhaps you have a better suggestion to me...?<br>
<br>
<div class="moz-signature">-- <br>
<div><font face="Arial" size="2">Regards</font></div>
<div><font face="Arial" size="2"> </font></div>
<div><font face="Arial" size="2">Signer: Eddy Nigg, StartCom Ltd.</font></div>
<div><font face="Arial" size="2">Jabber: <a class="moz-txt-link-abbreviated" href="mailto:startcom@startcom.org">startcom@startcom.org</a></font></div>
<div><font face="Arial" size="2">Phone: +1.213.341.0390</font></div>
</div>
</body>
</html>