<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Hi Dimitry,<br>
<br>
I think your effort is nice which also shows once again how badly such
a (good working) solution is needed. However I have a few suggestions
to make:<br>
<br>
First of all, I believe that a list of IDPs which conform to a certain
standard and criteria is way more effective then a black list of rough
IDPs for reasons we all know.<br>
<br>
Second, there needs to be a defined policy and criteria and not "<i>Identifiers
issued by <a class="moz-txt-link-freetext" href="http://www.jkg.in/openid/">http://www.jkg.in/openid/</a> will definitely be there</i>". Or
in other words, what makes an IDP worthy to be used by default for 99%
of the relying parties? How do we protect OpenID, its RPs and
effectively also all other end users...?<br>
<br>
Third, OpenID isn't yet adopted widely, but already there are various
black and white lists and other efforts cruising around....well,
welcome to the world of SMTP (a protocol designed in the 80's)!
Wouldn't it be better to create one combined effort by the community
with clear policies and definitions? I'm not saying that your efforts
are useless, but isn't this the wrong direction? Is this the result of
the unwillingness of the OpenID leaders (notably the people listed
here: <a class="moz-txt-link-freetext" href="http://openid.net/wiki/index.php/OpenID_Foundation/Board">http://openid.net/wiki/index.php/OpenID_Foundation/Board</a> ) to
address it?<br>
<br>
<div class="moz-signature">-- <br>
<div><font face="Arial" size="2">Regards</font></div>
<div><font face="Arial" size="2"> </font></div>
<div><font face="Arial" size="2">Signer: Eddy Nigg, StartCom Ltd.</font></div>
<div><font face="Arial" size="2">Jabber: <a class="moz-txt-link-abbreviated" href="mailto:startcom@startcom.org">startcom@startcom.org</a></font></div>
<div><font face="Arial" size="2">Phone: +1.213.341.0390</font></div>
</div>
<br>
Dmitry Shechtman wrote:
<blockquote cite="mid:001901c7c783$89f49820$b0db17ac@a9a181c8860745f"
type="cite">
<meta http-equiv="Content-Type" content="text/html; ">
<meta name="Generator" content="Microsoft Word 11 (filtered medium)">
<style>
<!--
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";
color:black;}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:blue;
text-decoration:underline;}
pre
{margin:0cm;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";
color:black;}
span.EmailStyle18
{mso-style-type:personal;
font-family:Arial;
color:navy;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:Arial;
color:navy;}
@page Section1
{size:612.0pt 792.0pt;
margin:72.0pt 90.0pt 72.0pt 90.0pt;}
div.Section1
{page:Section1;}
/* List Definitions */
@list l0
{mso-list-id:210266255;
mso-list-template-ids:-367750514;}
@list l1
{mso-list-id:1719746692;
mso-list-template-ids:-2013601572;}
@list l1:level1
{mso-level-start-at:3;
mso-level-tab-stop:36.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;}
ol
{margin-bottom:0cm;}
ul
{margin-bottom:0cm;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="Section1">
<p class="MsoNormal" style="margin-left: 36pt;"><font color="black"
face="Times New Roman" size="3"><span style="font-size: 12pt;">Errr...isn't
this
supposed to be a "white list server"? I mean, are you having a black
list of "bad" IDPs or are you registering "good" IDPs in
this list? <o:p></o:p></span></font></p>
<p class="MsoNormal" style="margin-left: 36pt;"><font color="black"
face="Times New Roman" size="3"><span style="font-size: 12pt;"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span
style="font-size: 10pt; font-family: Arial; color: navy;">Although the
term isn’t really
important, I believe this should be a black list (i.e. all are “good”
by default) of identifiers (i.e. “good” OPs may have issued “bad”
identifiers, see the getopenid.com case).<o:p></o:p></span></font></p>
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span
style="font-size: 10pt; font-family: Arial; color: navy;"><o:p> </o:p></span></font></p>
<p class="MsoNormal" style="text-indent: 36pt;"><font color="black"
face="Times New Roman" size="3"><span style="font-size: 12pt;">Whatever
the choice,
under which criteria are you listing either one on your list?<br>
<br>
</span></font><font color="navy" face="Arial" size="2"><span
style="font-size: 10pt; font-family: Arial; color: navy;"><o:p></o:p></span></font></p>
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span
style="font-size: 10pt; font-family: Arial; color: navy;">Various
heuristics will be used for blacklisting.
Identifiers issued by <a moz-do-not-send="true"
href="http://www.jkg.in/openid/">http://www.jkg.in/openid/</a>
will definitely be there...<o:p></o:p></span></font></p>
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span
style="font-size: 10pt; font-family: Arial; color: navy;"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span
style="font-size: 10pt; font-family: Arial; color: navy;"><o:p> </o:p></span></font></p>
<div>
<p class="MsoNormal"><font color="black" face="Arial" size="2"><span
style="font-size: 10pt; font-family: Arial;">Regards,</span></font><o:p></o:p></p>
<p class="MsoNormal"><font color="black" face="Arial" size="2"><span
style="font-size: 10pt; font-family: Arial;">Dmitry</span></font><o:p></o:p></p>
</div>
<div>
<div>
<p class="MsoNormal"><font color="black" face="Arial" size="2"><span
style="font-size: 10pt; font-family: Arial;">=damnian</span></font><o:p></o:p></p>
</div>
</div>
</div>
</blockquote>
<br>
</body>
</html>