<br><br><div class="gmail_quote">On Thu, Mar 12, 2009 at 7:18 PM, Ewout ter Haar <span dir="ltr"><<a href="mailto:ewoutterhaar@gmail.com">ewoutterhaar@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div class="im">On Thu, Mar 12, 2009 at 1:46 PM, Ben Laurie <<a href="mailto:benl@google.com">benl@google.com</a>> wrote:<br>
> On Thu, Mar 12, 2009 at 4:13 PM, Chris Messina <<a href="mailto:chris.messina@gmail.com">chris.messina@gmail.com</a>> wrote:<br>
>> ...the rub being that SAML is already widely deployed (from what I<br>
>> hear) but 1) few use it 2) integration costs are too high and 3)<br>
>> managing SAML from a government-to-citizen perspective seems fraught<br>
>> with huge costs and unnecessary burdens on both sides of the aisle.<br>
>><br>
>> It sounds like your ideal is "pragmatic SAML" but that seems a<br>
>> contradiction in terms. No?<br>
<br>
</div><div class="im">> And for "managing SAML from a government-to-citizen perspective seems<br>
> fraught with huge costs and unnecessary burdens on both sides of the<br>
> aisle." - managing SAML is only as hard as you make it. If all you<br>
> want something along the lines of an ID - like OpenID provides - then<br>
> its pretty trivial.<br>
<br>
</div>I always liked the "openid is just as secure as email verified<br>
identity" line.</blockquote><div><br></div><div>I don't think this is actually true.</div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"> Use just as much security as you need. I think nobody<br>
is saying your taxes should be filed with your OpenID identity. But<br>
don't let that stop you using it when you can.<br>
<br>
My impression is that OpenID is much more apropriate for many of the<br>
use cases in (european?) higher education where Shibboleth is being<br>
deployed. All of this complicated (both for the user and the<br>
implementor) infrastructure just to protect some copyrighted<br>
recourses?<br>
<br>
Ewout ter Haar<br>
<font color="#888888"><br>
<br>
--<br>
<a href="http://stoa.usp.br/ewout" target="_blank">http://stoa.usp.br/ewout</a><br>
</font><div><div></div><div class="h5">_______________________________________________<br>
general mailing list<br>
<a href="mailto:general@openid.net">general@openid.net</a><br>
<a href="http://openid.net/mailman/listinfo/general" target="_blank">http://openid.net/mailman/listinfo/general</a><br>
</div></div></blockquote></div><br>