[security] Who bears the risk..

[Alaric Dailey]

Did I miss something? Is there a way to LIMIT the IdP's you trust?

If there is... What a nightmare that would turn into.

>
>Your site might also decide to trust certain IdPs. That is probably the 
>first thing that will occur - sites will trust a whitelist of IdPs to have 
>performed some form of adequate verification so that they do not need to.
>
>Anyway - this is all obviously for the low end blog/forum stuff.
>
>--
>Pete
>


><< smime.p7s >>




>_______________________________________________
>security mailing list
>security at openid.net
>http://openid.net/mailman/listinfo/security

_________________________________________________________________
Get FREE company branded e-mail accounts and business Web site from 
Microsoft Office Live 
http://clk.atdmt.com/MRT/go/mcrssaub0050001411mrt/direct/01/