Re:Persona - Mozilla's decentralized and secure authenticati...
by fmarier on Saturday September 29, 2012 @02:59PM
(#4590510)
One of the reasons why we couldn't just "fix" OpenID is that we wanted a scheme that would be privacy-sensitive.
With OpenID, the result of the site redirecting you to the IdP (and then the IdP redirecting you back to the site) is that the IdP can get a trail of every website you're trying to log into. That's pretty fundamental to the way OpenID is designed.
With OpenID, the result of the site redirecting you to the IdP (and then the IdP redirecting you back to the site) is that the IdP can get a trail of every website you're trying to log into. That's pretty fundamental to the way OpenID is designed.