Re:The US Government Adopts OpenID
by fallintothis on Wednesday September 09, 2009 @01:35PM
(#813589)
If you own a domain that's an OpenID provider, you won't be able to use that.
Aren't there OpenID users who host their own identities exclusively for themselves? Is there danger in letting people do this? (I seriously don't know much about OpenID practices.)
Re:The US Government Adopts OpenID
by ajross on Wednesday September 09, 2009 @02:11PM
(#813671)
FTA:
Ten private companies, a number of US Government Federal Agencies primarily in the Health sector and the OpenID and Information Card Foundations will announce this morning in Washington DC the launch of a pilot program to allow members of the public to log in to participating government websites with their credentials from approved independent websites.
They're not allowing any OpenID cert, they're just blessing the big providers (presumably Google, Yahoo, etc...).
Re:The US Government Adopts OpenID
by rfreytag on Wednesday September 09, 2009 @02:42PM
(#813743)
"[W]hen we authenticate ourselves with Google, Yahoo, Verisign or whoever our Identity Provider of choice is, that website will pass a different, unique URL to the government site we're logging in to."
Sounds like Google, Yahoo, Verisign or whoever [sic] will have a lot of information about which government agencies you interact with and how often.
Re:The US Government Adopts OpenID
by wizard_2 on Wednesday September 09, 2009 @02:51PM
(#813758)
It's a step in the right direction. But I'm still wanting to use my own domain for my openid. The common attacks on open id (phishing, man in the middle when authenticating, etc) aren't mitigated by limiting the number of providers. I'd rather they come up with a security standard for openID providers then white list a few.
Aren't there OpenID users who host their own identities exclusively for themselves? Is there danger in letting people do this? (I seriously don't know much about OpenID practices.)
Ten private companies, a number of US Government Federal Agencies primarily in the Health sector and the OpenID and Information Card Foundations will announce this morning in Washington DC the launch of a pilot program to allow members of the public to log in to participating government websites with their credentials from approved independent websites.
They're not allowing any OpenID cert, they're just blessing the big providers (presumably Google, Yahoo, etc...).
Sounds like Google, Yahoo, Verisign or whoever [sic] will have a lot of information about which government agencies you interact with and how often.
Lame.