<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Does this OP satisfy the phishing-resistant authentication PAPE policy?
:)<br>
<br>
Very cool!<br>
Allen<br>
<br>
<br>
Jeremy Elson wrote
<blockquote
cite="mid:FB19C8A2A5590D4B99CA178087011BE5222C0B82DC@NA-EXMSG-C113.redmond.corp.microsoft.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html; ">
<meta name="Generator" content="Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="Section1"></div>
</blockquote>
<blockquote
cite="mid:FB19C8A2A5590D4B99CA178087011BE5222C0B82DC@NA-EXMSG-C113.redmond.corp.microsoft.com"
type="cite">
<div class="Section1">
<p class="MsoNormal">Greetings,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I’m writing to let you know about our new,
experimental
OpenID Provider at <a moz-do-not-send="true"
href="http://www.inkblotpassword.com">http://www.inkblotpassword.com</a>.
Our implementation has a twist: we show you a series of inkblot images
(similar
to a Rorschach test) to help you create and, later, remember your
password.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I’m part of a small group at Microsoft Research
that does
work in the security and distributed systems space. A few years ago,
one
of our interns (Adam Stubblefield, now at Johns Hopkins) developed the
idea of
using inkblot images for password prompting. He spent the summer doing
a
user study that showed that inkblots made it much easier for users to
remember very
strong passwords. The goal is to reduce the use of weak passwords.
You can read about the user study at <a moz-do-not-send="true"
href="ftp://ftp.research.microsoft.com/pub/tr/TR-2004-85.pdf">ftp://ftp.research.microsoft.com/pub/tr/TR-2004-85.pdf</a>.
(There’s also a summary of the research at <a moz-do-not-send="true"
href="http://research.microsoft.com/displayArticle.aspx?id=417">http://research.microsoft.com/displayArticle.aspx?id=417</a>.)<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Last month, we decided to whip up an OpenID
implementation
of Adam’s inkblot generator. Right now it’s pretty bare-bones,
but if people find it useful, we’d be open to suggestions on what to
improve.<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">Enjoy!<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Cheers,<o:p></o:p></p>
<p class="MsoNormal">Jeremy Elson<o:p></o:p></p>
<p class="MsoNormal">MSR<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<pre wrap="">
<hr size="4" width="90%">
_______________________________________________
general mailing list
<a class="moz-txt-link-abbreviated" href="mailto:general@openid.net">general@openid.net</a>
<a class="moz-txt-link-freetext" href="http://openid.net/mailman/listinfo/general">http://openid.net/mailman/listinfo/general</a>
</pre>
</blockquote>
<br>
</body>
</html>