<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Very interesting post! Yes, it seems that there are many commons...<br>
<br>
Steven Livingstone wrote:
<blockquote cite="mid:BAY113-W3068ADAB57096CF67A0336B6E60@phx.gbl"
type="cite">
<style>
P
{
margin:0px;
padding:0px
}
body
{
FONT-SIZE: 10pt;
FONT-FAMILY:Tahoma
}
</style>Henry, whilst i like this idea, i wonder how much of this
could be solved by a trust system in place .. similar to the system
already used by certificates.<br>
<br>
The main problem with certs is that it requires a lot of work for the
user. However, OpenID does not and so although on its own it is not as
secure as certificates, it does seem (to me) to have much in common.<br>
<br>
Now, i'm not sure what and how much people have discussed on this list
(i try to keep up), but i'd figure that a system of trusted delegation
and revocation would work well even in an extended OpenID world.<br>
<br>
So your Engineering team and Sun would have a two way trust system (or
asymmetrical trust if you wished) so that an authenticated OpenID for
either would be trusted in the other... and further could be used as
part of authorization. Whether this worked as a browser redirect, or
even better, using some delegated service authentication call is
another question (the latter being worked on at the moment i believe).<br>
<br>
I think if we start trying to think of sychronized passwords and so on
we are in for a world of pain. I imagine someone on this list is either
thinking or doing something about a distributed trust network for
OpenID providers?<br>
<br>
Revocation is a little tricker, but feasible.<br>
<br>
steven<br>
<a moz-do-not-send="true" href="http://livz.org">http://livz.org</a><br>
<br>
</blockquote>
<br>
<div class="moz-signature">-- <br>
<div><font face="Arial" size="2">Regards</font></div>
<div><font face="Arial" size="2"> </font></div>
<div><font face="Arial" size="2">Signer: Eddy Nigg, StartCom Ltd.</font></div>
<div><font face="Arial" size="2">Jabber: <a class="moz-txt-link-abbreviated" href="mailto:startcom@startcom.org">startcom@startcom.org</a></font></div>
<div><font face="Arial" size="2">Phone: +1.213.341.0390</font></div>
</div>
</body>
</html>