<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">
<div>Peter,</div><div><br></div>You're right; the level of security and openness versus the level of usability that is desired is a good question. I like to inform such questions with use cases, but I don't think I've yet OpenID's primary use cases, or a description of use cases that are not in scope. Does anyone have a document they could point me towards? It would help a lot in determining how much security to expect from the protocol.<div><br></div><div>Thanks a lot,</div><div>Nate.<br><div><br><div><div>On 12 Dec 2008, at 17:05, Peter Watkins wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><p style="margin: 0.0px 0.0px 0.0px 0.0px"><font face="Helvetica" size="3" style="font: 12.0px Helvetica">OpenID should not race to the gutter and undermine its security architecture<span class="Apple-converted-space"> </span></font></p> <p style="margin: 0.0px 0.0px 0.0px 0.0px"><font face="Helvetica" size="3" style="font: 12.0px Helvetica">just to make deployment easier.</font></p> </blockquote></div><br></div></div></body></html>