News for hackers. Stuff that matters.

A comment on The US Government Adopts OpenID.

Re:The US Government Adopts OpenID by rfreytag on Wednesday September 09, 2009 @02:42PM (#813743)
"[W]hen we authenticate ourselves with Google, Yahoo, Verisign or whoever our Identity Provider of choice is, that website will pass a different, unique URL to the government site we're logging in to."

Sounds like Google, Yahoo, Verisign or whoever [sic] will have a lot of information about which government agencies you interact with and how often.

[ Parent | on HN ]
Re:The US Government Adopts OpenID by codexon on Wednesday September 09, 2009 @03:17PM (#813799)
And they can also spoof you since they control their domain and know what your openid is.
[ Parent | on HN ]