Re: Review of Proposed Implementer’s Draft of OpenID 2.0 to OpenID Connect Migration Specification

Nat Sakimura sakimura at gmail.com
Wed Sep 24 16:27:03 UTC 2014


The authentication mechanism itself is out of scope.
You can, as an OP, select whatever the authentication mechanism you may
want to use.
OpenID Connect is concerned about transferring the information around the
authentication event to another party.
It is a federation protocol.

Nat

2014-09-25 1:17 GMT+09:00 Chris Drake <christopher at pobox.com>:

>  Hi,
>
> Can anyone tell me if any kind of mutual-authentication or other kind of
> phishing-protection is present anywhere in the specs?
>
> Kind Regards,
> Chris Drake
>



-- 
Nat Sakimura (=nat)
Chairman, OpenID Foundation
http://nat.sakimura.org/
@_nat_en
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs/attachments/20140925/81bdb516/attachment.html>


More information about the specs mailing list