[security] Fundamentals

[Eddy Nigg (StartCom Ltd.)]

I would like to start another discussion, which I guess, are the
fundamentals of OpenID. Since everything at the proposed OpenID standard
may be related, I want to understand certain things better and - if
needed organize these....Perhaps some answers exist to my questions:

- Who is OpenID? A loose group of people, a foundation, only a standard?
Who owns it? Who makes the decisions?
- What are the responsibilities of OpenID, if at all?
- Dan Lyke (I like your domain name ;-)) mentioned several times, that X
or Y is not the scope of OpenID...So are there options to change that?
Or should we create something like a binding "OpenID Implementation
Appendix"? What happens if crucial pieces of the puzzle isn't going to
be addressed?

Sorry if I ask questions, which might have been discussed already, but
in order to provide possible solutions to certain problems, we really
might need to start first at the very basics and fundamental stuff. The
reasoning behind this is, that the standard alone doesn't do any harm or
good, as long as it isn't used really. But once it gets adopted and used
by various parties, the standard alone isn't enough. I would have a few
ideas for solving various of these issues once it is more clear (at
least to me), what the organizational options are...

-- 
Regards
 
Signer:      Eddy Nigg, StartCom Ltd.
Phone:       +1.213.341.0390
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-security/attachments/20061026/7484d1e2/attachment-0002.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: eddy_nigg.vcf
Type: text/x-vcard
Size: 636 bytes
Desc: not available
URL: <http://lists.openid.net/pipermail/openid-security/attachments/20061026/7484d1e2/attachment-0002.vcf>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 7282 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.openid.net/pipermail/openid-security/attachments/20061026/7484d1e2/attachment-0002.bin>