<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">
<div>Peter,</div><div><br></div>This is a very, very strong claim to be making. I wouldn't make it about any protocol at all, and particularly not one that has a lot of improvements to be made to its security design and trust infrastructure.<div><br></div><div>As a rule, I think much harder about the attacks possible on systems I run and design than those of others'. Maybe that just comes from having too many bored, clever students in our dorms, though...</div><div><br></div><div>Take care,</div><div>Nate.</div><div><br></div><div><div><div>On 12 Dec 2008, at 15:54, Peter Watkins wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><p style="margin: 0.0px 0.0px 0.0px 0.0px"><font face="Helvetica" size="3" style="font: 12.0px Helvetica">Allowing my site visitors to use OpenID poses *zero* risk from a security</font></p> <p style="margin: 0.0px 0.0px 0.0px 0.0px"><font face="Helvetica" size="3" style="font: 12.0px Helvetica">standpoint and a privacy standpoint.<span class="Apple-converted-space"> </span></font></p> </blockquote></div><br></div></body></html>