Christoph,<br>yes, <a href="http://myopenid.com">myopenid.com</a> uses the PAPE extension notify the RP when a user has used the phone (CallVerifID) as a second factor.<br>larry-<br><br><div class="gmail_quote">On Fri, May 16, 2008 at 12:50 AM, Christoph Eunicke <<a href="mailto:christoph@eunicke.de">christoph@eunicke.de</a>> wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">Peter Williams schrieb:<br>
<div class="Ih2E3d">> Don't we already have it indirectly now, though, in the openid world?<br>
><br>
><br>
> If you use the myopenid phonefactor token, you are getting assurance<br>
> that the registered) phone is "controlled by" a national authority<br>
> (legally) - as given by the country code of the E.164 number.<br>
<br>
</div>I was wondering if there already exists a way in OpenID to transport<br>
this extra piece of information (your phone number is valid, you have<br>
authenticate this request via phone) to the RP? Does myopenid pass this<br>
information already?<br>
<br>
BTW: You can get a SkypeIn-Number (chose any VoIP you like) without any<br>
relationship to a country, so claims made on numbers are not very strong :-(<br>
<div><div></div><div class="Wj3C7c"><br>
<br>
--<br>
Christoph Eunicke<br>
Computer Networks and Internet<br>
Wilhelm Schickard Institute for Computer Science<br>
University of Tuebingen, 72076 Tuebingen, Germany<br>
<br>
_______________________________________________<br>
general mailing list<br>
<a href="mailto:general@openid.net">general@openid.net</a><br>
<a href="http://openid.net/mailman/listinfo/general" target="_blank">http://openid.net/mailman/listinfo/general</a><br>
</div></div></blockquote></div><br>