<div>If you write an OpenID relying party library or custom implementation, you might want to review a post I just wrote on a potential security hole I've never heard anyone else talk about:</div><div><br></div><a href="http://blog.nerdbank.net/2009/03/openid-association-poisoning.html">http://blog.nerdbank.net/2009/03/openid-association-poisoning.html</a><div>
<br clear="all">--<br>Andrew Arnott<br>"I [may] not agree with what you have to say, but I'll defend to the death your right to say it." - Voltaire<br>
</div>