<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
<div class="moz-text-html" lang="x-unicode"> Daniel E. Renfer wrote:
<blockquote
cite="mid36bd6e0b0610290252u36047054m9ec17174be5c5a15@mail.gmail.com"
type="cite">
<pre wrap="">There is one thing that I think I should point out that no one else
has really mentioned because it kinda goes against what OpenId stands
for. Correct me if I'm wrong but, there is nothing in the OpenId spec
that prevents you from requiring your own password on top of the
OpenId authentication.
</pre>
</blockquote>
Which is exactly the opposite of the purpose of OpenID...In such a
case, for what should OpenID be good for in the first place?<br>
<blockquote
cite="mid36bd6e0b0610290252u36047054m9ec17174be5c5a15@mail.gmail.com"
type="cite">
<pre wrap="">I'm sure on most RP's the hypothetical no-password.com would be the
first entry in the IdP blacklist. (followed by everybody on the email
blacklist)
</pre>
</blockquote>
I guess, that no-password.com is not so hypothetical, but exists
already in similar forms....My suggestion however would be, to handle a
central list of GOOD IDP's instead of starting a bunch of black lists
as they are in SMTP. The advantage would also be, that the list starts
with positives instead of negatives, which you first don't know where
and who they are and have to be discovered first. Bad IDP's usually get
discovered only after some damage has been done and with todays
possibilities, the blacklist would always be behind...<br>
<br>
Such a central registry would not prevent the adding of additional
registries or networks, but would guaranty a basic adherence to a
defined standard, making OpenID in every form useful, for hobbyists and
commercial providers alike.<br>
<br>
<div class="moz-signature">-- <br>
<div><font face="Arial" size="2">Regards</font></div>
<div><font face="Arial" size="2"> </font></div>
<div><font face="Arial" size="2">Signer: Eddy Nigg, StartCom Ltd.</font></div>
<div><font face="Arial" size="2">Phone: +1.213.341.0390</font></div>
</div>
</div>
<table class="moz-vcard-table">
<tbody>
<tr>
<td valign="top"> <br>
</td>
<td>
<table id="moz-vcard-properties-table">
<tbody>
<tr>
<td class="moz-vcard-title-property"> <a
href="http://www.startcom.org" private="">Eddy Nigg</a> <<a
href="mailto:eddy_nigg@startcom.org" private="">eddy_nigg@startcom.org</a>></td>
</tr>
<tr>
<td class="moz-vcard-property">StartCom Ltd. - StartCom CA
- MediaHost (TM)</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</body>
</html>