<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Hi Jason,<br>
<br>
Jason Salaz wrote:
<blockquote
cite="mid:9017d890707161028y75a66b17odd3ca1d0c1f65cc4@mail.gmail.com"
type="cite"><br>
That's a great way to shut out everyone that isn't an enterprise.
<br>
</blockquote>
Why? That's not the way I presented it at all...you don't have to be an
enterprise in order to run an IDP service, do you?<br>
<blockquote
cite="mid:9017d890707161028y75a66b17odd3ca1d0c1f65cc4@mail.gmail.com"
type="cite">It's a great theory, but it'll never work in practice.
<br>
<br>
I will never EVER submit my domain to be "approved" in order for RPs
<br>
to take my auth.
<br>
</blockquote>
You meant your IDP service? But you don't have to, nobody can force
this upon anybody...<br>
<blockquote
cite="mid:9017d890707161028y75a66b17odd3ca1d0c1f65cc4@mail.gmail.com"
type="cite"><br>
This is a very sticky subject, blocking illegitimate and legitimate,
<br>
but there is one thing I know for sure;
<br>
If you require people to have their IdP validated before the majority
<br>
RPs will allow them to auth, you will have single handedly KILLED
<br>
OpenID.
<br>
</blockquote>
I don't believe so...Perhaps you should read exactly what I posted
right from the beginning! You register to various places today without
even thinking twice...you register to forums, to blogs, to paypal, to
ebay, to many wikis....an endless list. So why are you afraid to
register your IDP service? <br>
<br>
Personally I believe it will strengthen OpenID and accelerate adoption
of OpenID by RPs! It will take the attack vector away from OpenID and
make it more secure. If reasonable applied I will see this as a
breakthrough for OpenID over similar concepts!<br>
<blockquote
cite="mid:9017d890707161028y75a66b17odd3ca1d0c1f65cc4@mail.gmail.com"
type="cite"><br>
Centralizing any aspect of a decentralized system is a very very BAD
<br>
idea. Especially centralizing the part that OpenID decentralized in
<br>
the first place.
<br>
</blockquote>
Nothing will change in the concept, IDPs will operate decentralized and
freely as always.<br>
<br>
<div class="moz-signature">-- <br>
<div><font face="Arial" size="2">Regards</font></div>
<div><font face="Arial" size="2"> </font></div>
<div><font face="Arial" size="2">Signer: Eddy Nigg, StartCom Ltd.</font></div>
<div><font face="Arial" size="2">Jabber: <a class="moz-txt-link-abbreviated" href="mailto:startcom@startcom.org">startcom@startcom.org</a></font></div>
<div><font face="Arial" size="2">Phone: +1.213.341.0390</font></div>
</div>
</body>
</html>