Good point. This brings us to why I think <a href="http://myopenid.com">myopenid.com</a>'s option to disable passwords once you've added an X509 of Infocard login to your account is so awesome.<br clear="all">--<br>
Andrew Arnott<br>"I [may] not agree with what you have to say, but I'll defend to the death your right to say it." - S. G. Tallentyre<br>
<br><br><div class="gmail_quote">On Sat, Jun 6, 2009 at 11:12 PM, SitG Admin <span dir="ltr"><<a href="mailto:sysadmin@shadowsinthegarden.com">sysadmin@shadowsinthegarden.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div class="im"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Short of a password disable feature, I'd change my password to a cryptographically strong random password so that neither I nor anyone else could ever log in using it again...<br>
</blockquote>
<br></div>
Problem! I've forgotten your password, and need to reset so I can log in. How much of Andrew's personal information do I need to provide before the RP is convinced of my - I mean, of his - identity?<br>
<br>
-Shade<br>
</blockquote></div><br>