On 1/21/07, <b class="gmail_sendername">Ka-Ping Yee</b> <<a href="mailto:openid@zesty.ca">openid@zesty.ca</a>> wrote:<br>> The core part of the strategy, and the core untested claim,<br>> is that users can develop the habit of using a bookmark
<br>> to log in. If they use the bookmark, they're safe; if they<br>> don't, they're not.<br><br>It seems to me that if "the core part of the strategy" is to get users to use bookmarks, then the strategy relies on merely hacking around limitations in today's browsers. This is, at best, a short term approach. However, I strongly believe that secure authentication and identity is sufficiently important that we should NOT be wasting our time on building hacks. Rather, we should be determining:
<br><br>* What are the <span style="font-weight: bold;">best</span> modifications that we can make to clients?<br>* What can we do to get client developers to implement those modifications?<br><br>Let's solve these problems properly and be done with it. No more hacks.
<br><br>bob wyman<br><br><br>