<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Allen, would not the fact that the content of the pop-up is
specifically declared out of scope in the WG proposal preclude guiding
the OP to provide such warnings or, for instance, display a sign-in
seal, in the pop-up ?<br>
<br>
Separately, a language hint from the RP is clearly orthogonal to the
question of pop-up/full window. Are there implications for them to be
conflated into a single extension, e.g. for metadata advertisement of
extension support?<br>
<br>
paul<br>
<br>
Allen Tom wrote:
<blockquote cite="mid:49C2ED40.1080408@yahoo-inc.com" type="cite">
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
The popup window will be REQUIRED to display the address bar. OPs will
be strongly encouraged to educate their users to always pay attention
to the URL of the address bar before entering their credentials.<br>
<br>
In particular, I think MySpace does an excellent job on their home page:<br>
<br>
<h3>Always make sure you're visiting the real myspace.com!</h3>
<ol>
<li>Check the URL in your browser.</li>
<li>Make sure it begins with <a moz-do-not-send="true"
class="moz-txt-link-freetext" href="http://www.myspace.com/">http://www.myspace.com/</a></li>
<li>If ANY OTHER PAGE asks for your info, DON'T LOG IN!</li>
</ol>
Allen<br>
<br>
<br>
SitG Admin wrote:
<blockquote cite="mid:f06110401c5e89af89b8c@%5B192.168.0.2%5D"
type="cite">
<blockquote type="cite">Phishing still is a major concern, however,
we do not think that the popup window significantly changes the
phishing scenarios compared to the existing full browser window UIs
today. <br>
</blockquote>
<br>
Are you speaking of full-size windows, here, or windows that have an
address bar in them? Pop-up windows that are missing this indication of
what site the user is at may reduce confusion by eliminating
distractions, but they also take away from the user's awareness of
what's going on. <br>
<br>
-Shade <br>
</blockquote>
<br>
<pre wrap="">
<hr size="4" width="90%">
_______________________________________________
general mailing list
<a class="moz-txt-link-abbreviated" href="mailto:general@openid.net">general@openid.net</a>
<a class="moz-txt-link-freetext" href="http://openid.net/mailman/listinfo/general">http://openid.net/mailman/listinfo/general</a>
</pre>
<pre wrap="">
<hr size="4" width="90%">
No virus found in this incoming message.
Checked by AVG.
Version: 7.5.557 / Virus Database: 270.11.19/2011 - Release Date: 19/03/2009 7:05 AM
</pre>
</blockquote>
<br>
<div class="moz-signature">-- <br>
<font size="-1">Paul Madsen<br>
e:paulmadsen @ ntt-at.com<br>
p:613-482-0432<br>
m:613-282-8647<br>
web:connectid.blogspot.com<br>
</font><a href="http://feeds.feedburner.com/%7Er/blogspot/gMwy/%7E6/1"><img
src="cid:part1.09050307.04090005@rogers.com" alt="ConnectID"
style="border: 0pt none ;"></a></div>
</body>
</html>