<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">
Isak,<div><br></div><div>If you aren't comfortable trusting the issuer/OP of a credential, then you're not likely to find federated identity of any flavor, including OpenID, an acceptable solution. The RP is, as the name would imply, totally reliant on the OP to properly authenticate users.</div><div><br></div><div>If you can't do that and you'd need to fall back on additional confirmation -- e.g. RP-based authentication, as you describe -- then the only additional benefit is having a common identifier for the user. That's not a really big use case in the face of extra work for your users.</div><div><br></div><div>Hopefully you'll reach a state where you can trust the issuers at some point.</div><div><br></div><div>Take care,</div><div>Nate.</div><div><br><div><div>On 30 May 2008, at 15:02, Isak Hansen wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><p style="margin: 0.0px 0.0px 0.0px 0.0px"><font face="Helvetica" size="3" style="font: 12.0px Helvetica">#2 doesn't trust the first system (we do have full control over #1,</font></p> <p style="margin: 0.0px 0.0px 0.0px 0.0px"><font face="Helvetica" size="3" style="font: 12.0px Helvetica">but need to support other #1-like clients that we cannot trust).</font></p> <p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica; min-height: 14.0px"><br></p> <p style="margin: 0.0px 0.0px 0.0px 0.0px"><font face="Helvetica" size="3" style="font: 12.0px Helvetica">We want to avoid storing the users' plaintext password (for #2) in</font></p> <p style="margin: 0.0px 0.0px 0.0px 0.0px"><font face="Helvetica" size="3" style="font: 12.0px Helvetica">#1's db. Asking them for a password on demand could work, but isn't</font></p> <p style="margin: 0.0px 0.0px 0.0px 0.0px"><font face="Helvetica" size="3" style="font: 12.0px Helvetica">very convenient for the user.</font></p> <p style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica; min-height: 14.0px"><br></p> <p style="margin: 0.0px 0.0px 0.0px 0.0px"><font face="Helvetica" size="3" style="font: 12.0px Helvetica">Would OpenID work for us?</font></p> </blockquote></div><br></div></body></html>