<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=utf-8">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";
color:black;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;
color:black;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body bgcolor=white lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Eddy,<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Don't get me wrong, I'm not trying to say that a RP will be
forced to use one of these services. Let alone that VeriSign will run one.
What I'm merely saying is that I think these sorts of services will come into existence
where a RP can query for information about a Provider or particular user. The RP
will be able to choose which service they wish to query, assuming multiple
exist. I would not think that openid.net is the appropriate place to run one,
but there is nothing stopping *<b>anyone</b>* in the OpenID community from
creating one or working together to do so.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Does that make sense?<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>--David<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<div>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif";
color:windowtext'>From:</span></b><span style='font-size:10.0pt;font-family:
"Tahoma","sans-serif";color:windowtext'> general-bounces@openid.net
[mailto:general-bounces@openid.net] <b>On Behalf Of </b>Eddy Nigg (StartCom
Ltd.)<br>
<b>Sent:</b> Friday, July 13, 2007 12:54 PM<br>
<b>To:</b> Eric Norman; general@openid.net<br>
<b>Subject:</b> Re: [OpenID] Rule of thumb<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>Hi Eric,<br>
<br>
Eric Norman wrote: <o:p></o:p></p>
<pre><o:p> </o:p></pre><pre>Methinks there's an awful lot of RPs that would certainly<o:p></o:p></pre><pre>prefer not. <o:p></o:p></pre>
<p class=MsoNormal>I don't suppose this to be forced on anybody! But as anybody
can chose to add CAs to the browser or one add various white and black lists to
the mail server, one could opt to make it a requirement or not. I'd view it as
a service, confirming the adherence of an IDP to certain standards and rules
(See the various extensions in draft right now).<br>
<br>
<o:p></o:p></p>
<pre>They would view this as the fox guarding the<o:p></o:p></pre><pre>henhouse, to use an old adage.<o:p></o:p></pre><pre> <o:p></o:p></pre>
<p class=MsoNormal>It depends who is going to be the fox....;-)<br>
Except what's wrong with the community taking care of this?<br>
<br>
<o:p></o:p></p>
<pre><o:p> </o:p></pre><pre>After all, they are the ones with something at risk. So<o:p></o:p></pre><pre>they're not going to listen much if the OpenID community<o:p></o:p></pre><pre>starts telling them how to do their risk management. And<o:p></o:p></pre><pre>rightly so.<o:p></o:p></pre>
<p class=MsoNormal style='margin-bottom:12.0pt'>I for one can't make use of
OpenID in it's current form, except if strictly trusting only our own IDP. I'm
sure there are many more out there hesitating to adopt OpenID for this very
reason. An RP in the OpenID world is usually a web site, not a person! Which
makes accepting an IDP not a case-to-case based decision, but rather accept all
or nothing. Nor do I have the intention to screen every new incoming IDP upon
each request.<br>
<br>
Perhaps you have a better suggestion to me...?<o:p></o:p></p>
<div>
<p class=MsoNormal>-- <o:p></o:p></p>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'>Regards</span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'> </span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'>Signer:
Eddy Nigg, StartCom Ltd.</span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'>Jabber:
<a href="mailto:startcom@startcom.org">startcom@startcom.org</a></span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:10.0pt;font-family:"Arial","sans-serif"'>Phone:
+1.213.341.0390</span><o:p></o:p></p>
</div>
</div>
</div>
</body>
</html>