Skip to main content

Fuzbolero .'s Library tagged openid →  View Popular

30 Aug 09

OpenID at risk due to DNS flaw, warns researcher : News : Security - ZDNet Asia

  • A fundamental issue affects the OpenID authentication system, due to its reliance on the Domain Name System, a Sun identity-technology specialist has warned.

  • Robin Wilton, a corporate architect for federated identity at Sun, described OpenID's reliance on the integrity of the Domain Name System (DNS) as a "multi-factor problem" in light of the discovery of a fundamental flaw in DNS by security researcher Dan Kaminsky.



    "You may have seen the recent announcements about DNS cache poisoning, and the potential effect of this on all kinds of Internet-based applications' security," Wilton wrote in a blog post on Friday. "One area in which it can have a particularly significant impact is OpenID."

  • 2 more annotations...

phpBB.com • View topic - [BETA] phpBB OpenID ver 0.2.4

    • Some things to consider adding options for:
      • Disable OpenID login
      • Disable OpenID Registration
      • Allow OpenID to skip registration page
      • OpenID registration skips captcha
08 Jun 09

OPX - Your own branded OpenID solution - JanRain.com

  • OpenID is evolving, and organizations are recognizing the value of
    providing a branded OpenID to their customers, building better
    relationships with those customers, and increasing their value over
    time. With the comprehensive JanRain OPX solution, a Software as a
    Service platform, you can capture all the benefits of OpenID for
    your website without all the hassles.
18 Mar 09

Implementers' Draft: XRDS-Simple 1.0 Draft 1 - xrds-simple.net

  • XRDS-Simple provides a format and workflow for the discovery of resources
    metadata, and other linked resources. As web services continue to grow,
    applications utilize a wider range of web services and resources across
    multiple providers. XRDS-Simple allows providers to document their resources
    in a machine-readable way, which can be automatically discovered by consumer
    applications.

DiSo-Project.org - interoperable building blocks for decentralized social web

Related: openid, oauth, microformats, etc.

diso-project.org - Preview

openid socialnetworking microformats opensocial

  • DiSo (dee • soh) is an initiative to facilitate the creation of open, non-proprietary and interoperable building blocks for the decentralized social web.

Drupal and OpenID | realtech.burningbird.net

  • Until this weekend, I had turned off new user registration at my Drupal sites, because I get too many junk user registrations. However, to incorporate OpenID into a Drupal site, you have to allow users to register themselves, regardless of whether they use OpenID or not.
  • I think this all or nothing approach actually limits the incorporation of OpenID within a Drupal site.
  • 7 more annotations...

An OpenID is not an account! - simonwillison.net

  • The key thing here is that you should never trust an OpenID on its own. It could be a real person, or it could be a spammer, psycopath or general undesirable.



    Does this mean OpenID is completely useless? Absolutely not! You just have to think of it in the same way that you think of username and password combinations: as the “key” to an account.

  • The trust issue is now null and void. An OpenID is just as trustworthy as a regular username and password (which could have been posted to bugmenot and shared with thousands of people).
  • 1 more annotations...

Feature request: Integration of idselector instead? | drupal.org

Hmmm. Ideally, such functionality should be based on either opensourced solutions or go directly towards an OpenID provider you trust. Not good lacking insight into the code of security features.

drupal.org/306200 - Preview

drupal cms modules security authentication openid opensource security-management

  • Comfortable OpenID Login Box
  • The problem with ID Selector isn't open source, is it?
  • 2 more annotations...

Another blog about OpenID - ignisvulpis.blogspot.com

See also list of other blogs about "identity" along the sidebar on that blog.

ignisvulpis.blogspot.com - Preview

openid blog authentication reference development

OpenID.net » Blog Archive » 2008: Momentum

  • 2008 was an awesome year for OpenID where the community created significant momentum moving toward mainstream adoption.  No, not every site on the web is using OpenID nor does every consumer know what OpenID does, but last year alone the number of sites that accept OpenID for sign in more than tripled1.  Today, there are over thirty-thousand publicly accessible sites supporting OpenID for sign in and well over half a billion OpenID enabled accounts.
  • AOL2, Google3, Microsoft4, mixi (the largest social network in Japan)5 and Yahoo!6 have all shipped OpenID Provider implementations with nearly all of them supporting OpenID 2.0.
  • 8 more annotations...

On OpenID Gaining Momentum: 30,000 Sites, Half a Billion Accounts « The Real McCrea

  • Two nice pieces yesterday on how OpenID picked up steam in 2008. David Recordon’s post at OpenID.net is simply entitled 2008:Momentum. It offers a great review of the progress made last year:

IDselector.com - Making OpenID easier

    • Helps new users get and remember their OpenID.
    • "One click" login experience for return users.
    • Consistent login experience across OpenID enabled websites.

OpenID Provider (OP) Delegation - wiki.openid.net

  • This page exists to track information relating to the OpenID Provider Delegation Extension 1.0. 

OpenID Provider Delegation Extenstion - Draft 1 - wiki.openid.net

  • This document specifies an extension to OpenID Authentication 2.0
    Discovery. This extension allows an end-user to delegate authority
    over a particular OpenID Identifier to divergent OpenID Providers
    (OP's), depending on certain characteristics of a Relying Party
    and/or certain characteristics of an OpenID transaction.





    This extension specifies three categories under which Identifier
    authority can be delegated: Service, Class, and Domain. For example,
    an Identifier might specify a different authoritative OP depending
    on the Service (e.g., OpenID 2.0, OAuth, and others); the RP Domain
    (*.example.com); or a pre-defined service Class (e.g., one OP for
    single-factor auth, and another OP when two-factor Auth is
    required).





    By providing OpenID Identifiers with the ability to specify multiple
    OP's based on particular characteristics of each OpenID transaction,
    users will be able to utilize the best OP for any particular OpenID
    transaction.
1 - 20 of 57 Next › Last »
Showing 20▼ items per page

Selected Tags

Related Tags

Sponsored Links

Ads by Google

Diigo is about better ways to research, share and collaborate on information. Learn more »

Join Diigo