<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
<title></title>
</head>
<body text="#000000" bgcolor="#ffffff">
<br>
On 06/09/2010 01:57 AM, From John Kemp:<br>
<blockquote cite="mid:1C062292-3DD5-471B-B805-219DB7702AD2@jkemp.net"
type="cite">
<pre wrap="">Well, perhaps, and I would also note that I actually like self-assertion. I don't have a problem with it for lots of use-cases. I don't think it's a problem that people can lie either.</pre>
</blockquote>
<br>
And considering
<a class="moz-txt-link-freetext" href="http://esw.w3.org/Foaf%2Bssl/FAQ#How_does_this_improve_over_X.509_or_GPG_Certificates.3F">http://esw.w3.org/Foaf%2Bssl/FAQ#How_does_this_improve_over_X.509_or_GPG_Certificates.3F</a>
it all depends what you want to protect. If it's some social web site
authentication, it might be reasonable to rely on social buddies. But
for anything with real value, do you really want to rely on some
unknown claims and assertions? Would you give out your company's
secrets based on some folks claiming to know Henry or perform a
financial or other transaction based on claims made by some web
buddies? I wouldn't put my money on that ever.<br>
<br>
<blockquote cite="mid:1C062292-3DD5-471B-B805-219DB7702AD2@jkemp.net"
type="cite">
<pre wrap="">But the reason people want identity providers, I think, and the potential (note: potential) value they bring is the ability to make an assertion backed up by something close to facts - ie. a verification or "real" authentication process. </pre>
</blockquote>
<br>
In addition to potentially well defined procedures, public key
infrastructure, warranties, auditing and more...<br>
<br>
<div class="moz-signature">
<table cellpadding="0" cellspacing="0" border="0">
<tbody>
<tr>
<td colspan="2">Regards </td>
</tr>
<tr>
<td colspan="2"> </td>
</tr>
<tr>
<td>Signer: </td>
<td>Eddy Nigg, COO/CTO</td>
</tr>
<tr>
<td> </td>
<td><a href="http://www.startcom.org">StartCom Ltd.</a></td>
</tr>
<tr>
<td>XMPP: </td>
<td><a href="xmpp:startcom@startcom.org">startcom@startcom.org</a></td>
</tr>
<tr>
<td>Blog: </td>
<td><a href="http://blog.startcom.org">Join the Revolution!</a></td>
</tr>
<tr>
<td>Twitter: </td>
<td><a href="http://twitter.com/eddy_nigg">Follow Me</a></td>
</tr>
<tr>
<td colspan="2"> </td>
</tr>
</tbody>
</table>
</div>
<br>
</body>
</html>