[security] Nonrepudiation, and Trusting OpenID Providers

[Allen Tom]

So once banks accept OpenID, banks will require that OPs authenticate users
using ³strong auth², using mechanisms that are agreed upon by both the the
OP and the bank.

Allen

On 12/9/09 7:46 PM, "Brandon Ramirez" <brandon.s.ramirez at gmail.com> wrote:

> 
> 
> In other words, I personally trust Google not to reset my passwords.  My bank,
> however, why should they trust Google?  Or Joe-Shmo-Provider?

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-security/attachments/20091209/42ab2370/attachment.htm>