<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
<br>
<br>
Isak Hansen:
<blockquote
cite="mid:6b9e1eb20805300802lff200fdoeab5a96c508deb93@mail.gmail.com"
type="cite">
<pre wrap="">I'm working on a web app that needs to authenticate with a 2nd system
as the user logged into #1.
#2 doesn't trust the first system (we do have full control over #1,
but need to support other #1-like clients that we cannot trust).
We want to avoid storing the users' plaintext password (for #2) in
#1's db. Asking them for a password on demand could work, but isn't
very convenient for the user.
Would OpenID work for us?
</pre>
</blockquote>
<br>
I think so. You need to find an OpenID provider you trust which can
perform the authentication for either site. Alternatively you can setup
your own provider (provided #2 will trust it).<br>
<br>
<br>
<div class="moz-signature">
<table border="0" cellpadding="0" cellspacing="0">
<tbody>
<tr>
<td colspan="2">Regards </td>
</tr>
<tr>
<td colspan="2"> </td>
</tr>
<tr>
<td>Signer: </td>
<td>Eddy Nigg, <a href="http://www.startcom.org">StartCom Ltd.</a></td>
</tr>
<tr>
<td>Jabber: </td>
<td><a href="xmpp:startcom@startcom.org">startcom@startcom.org</a></td>
</tr>
<tr>
<td>Blog: </td>
<td><a href="http://blog.startcom.org">Join the Revolution!</a></td>
</tr>
<tr>
<td>Phone: </td>
<td>+1.213.341.0390</td>
</tr>
<tr>
<td colspan="2"> </td>
</tr>
</tbody>
</table>
</div>
</body>
</html>