[Preston] Ideas for the future

[Andy Smith]

Hi Gena,

On Sat, Apr 12, 2008 at 08:00:12PM +0100, Georgina wrote:
> Exactly, wasn't this what I was trying to say initially?  You expressed the
> security advantage of Open ID in a few lines.  Which raises the question is
> there enough material for a LUG meeting?

Bearing in mind I'm not the one proposing to do the demo, so I
wouldn't like to presume how they would do it..

However if I were then I would probably start by describing it, as I
just did.  Then I would move on to demonstrating how anyone with a
website can be their own OpenID provider (role D in the text below).
If there were still time then I might show how this can be
integrated with popular web applications such as Wordpress blog
software.

The fact that anyone with an existing web site can be an OpenID
provider, and anyone with an existing web application (e.g. a blog)
can authenticate by OpenID means that there should be ample material
for demonstrations.

Not having Internet access would prove to be a bit of a stumbling
block however.  I don't know if your meetings do have that
available.

Cheers,
Andy

> -----Original Message-----
> From: preston-bounces at mailman.lug.org.uk
> [mailto:preston-bounces at mailman.lug.org.uk] On Behalf Of Andy Smith
> If you use services A, B and C from different organisations, all of which
> have their own authentication scheme, then you need to give and maintain
> credentials at three different sites.  These credentials will be subject to
> three different privacy policies and will be accessible to many people at
> three different organisations.
> 
> If you use services A, B and C from different organisations, all of which
> accept OpenID run by organisation D (which may be yourself), then you have
> to maintain credentials with organisation D only.  A, B and C will have to
> take D's word for it that you are who you say you are, and aside from the
> fact that you use their services, that's all A, B and C need to know.  Your
> convenience is increased and your exposure to risk is decreased.

-- 
http://bitfolk.com/ -- No-nonsense VPS hosting
Encrypted mail welcome - keyid 0x604DE5DB
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://mailman.lug.org.uk/pipermail/preston/attachments/20080412/31995f1c/attachment-0001.bin