Comments on: Analysis of OpenID implementations

By: Tamlyn

Tamlyn — Mon, 11 Feb 2008 10:08:06 +0000

(fixed the URLs)

PiP is quite interesting. I was impressed by the granular control of the simple registration extension, i.e. you can choose exactly which details to expose to the Relying Party, but I missed having a "complete all fields" button. The ability to set a date on which your 'trust' for the Relying Party will expire (i.e. after which you will need to re-authorise it) seems a bit unnecessary. It may also give the false impression that your account at the site of the Relying party will be terminated after that date or that they will no longer have access to your information.

There appear to be lots of other features to tie in with VeriSign's identity services but I haven't had a chance to check them out yet.

By: Kelly

Kelly — Sun, 10 Feb 2008 20:43:52 +0000

Remove the .'s from the end of the URLs

By: LiamM

LiamM — Sun, 10 Feb 2008 19:44:25 +0000

Hmmm, neither of those pages work for me, Gary.

By: Kelly

Kelly — Sat, 09 Feb 2008 16:00:16 +0000

Thanks Gary, we'll check that out!

By: Gary Krall

Gary Krall — Fri, 08 Feb 2008 20:16:56 +0000

Hi: As the technical director for the OpenID development here at Verisign I would be remiss if I did not ask you to check out our implementation.

Our Identity provider called the "PiP" is located at: https://pip.verisignlabs.com I would also encourage you to check out or Firefox extension called "SeatBelt" which can be located at: https://pip.verisignlabs.com/seatbelt.do

Thanks!

By: LiamM

LiamM — Fri, 08 Feb 2008 17:35:34 +0000

Interesting that this appeared on the Beeb site today :-

http://news.bbc.co.uk/1/hi/technology/7234499.stm