<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: OpenID Providers that Don&#8217;t Consume are not Evil</title>
	<atom:link href="http://blog.enthinnai.com/2008/03/24/openid-providers-that-dont-consume-are-not-evil/feed/" rel="self" type="application/rss+xml" />
	<link>http://blog.enthinnai.com/2008/03/24/openid-providers-that-dont-consume-are-not-evil/</link>
	<description>Blog by EnThinnai Team Members</description>
	<lastBuildDate>Thu, 30 Jun 2011 13:06:09 -0700</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.5</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: Aswath</title>
		<link>http://blog.enthinnai.com/2008/03/24/openid-providers-that-dont-consume-are-not-evil/comment-page-1/#comment-1056</link>
		<dc:creator>Aswath</dc:creator>
		<pubDate>Thu, 27 Mar 2008 21:11:40 +0000</pubDate>
		<guid isPermaLink="false">http://blog.enthinnai.com/2008/03/24/openid-providers-that-dont-consume-are-not-evil/#comment-1056</guid>
		<description>Phil:

I didn&#039;t realize that OpenIDs derived from wordpress.com is failing to be recognized. Let me to do some exploring and will let you know.

It is a best current practice for Relying Parties to associate multiple OpenIDs with a single account. this way when one OpenID fails for whatever reason users are not locked out of service. In this respect many RPs, including EnThinnai, is defunct.

I also would strongly recommend that you should use &lt;a href=&quot;http://wiki.openid.net/Delegation&quot; rel=&quot;nofollow&quot;&gt;OpenID delegation &lt;/a&gt;of one of your pages. This way you can maintain the URL of that page to be your OpenID and can change the OpenID provider to maintain full availability.</description>
		<content:encoded><![CDATA[<p>Phil:</p>
<p>I didn&#8217;t realize that OpenIDs derived from wordpress.com is failing to be recognized. Let me to do some exploring and will let you know.</p>
<p>It is a best current practice for Relying Parties to associate multiple OpenIDs with a single account. this way when one OpenID fails for whatever reason users are not locked out of service. In this respect many RPs, including EnThinnai, is defunct.</p>
<p>I also would strongly recommend that you should use <a href="http://wiki.openid.net/Delegation" rel="nofollow">OpenID delegation </a>of one of your pages. This way you can maintain the URL of that page to be your OpenID and can change the OpenID provider to maintain full availability.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Phil Wolff</title>
		<link>http://blog.enthinnai.com/2008/03/24/openid-providers-that-dont-consume-are-not-evil/comment-page-1/#comment-1052</link>
		<dc:creator>Phil Wolff</dc:creator>
		<pubDate>Thu, 27 Mar 2008 11:26:54 +0000</pubDate>
		<guid isPermaLink="false">http://blog.enthinnai.com/2008/03/24/openid-providers-that-dont-consume-are-not-evil/#comment-1052</guid>
		<description>I&#039;ve been a wordpress.com OpenID for about six months but they recently stopped being compatible with most OpenID parsers; everywhere I go, including places I visited previously, fail to recognize my ID as valid. 

Is there an extension or successor to OpenID that offers a list of OpenIDs to an OpenID consumer? So that, when my provider is offline or bankrupt or discontinues the service, I can still authenticate as me? still login to my services?</description>
		<content:encoded><![CDATA[<p>I&#8217;ve been a wordpress.com OpenID for about six months but they recently stopped being compatible with most OpenID parsers; everywhere I go, including places I visited previously, fail to recognize my ID as valid. </p>
<p>Is there an extension or successor to OpenID that offers a list of OpenIDs to an OpenID consumer? So that, when my provider is offline or bankrupt or discontinues the service, I can still authenticate as me? still login to my services?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Aswath</title>
		<link>http://blog.enthinnai.com/2008/03/24/openid-providers-that-dont-consume-are-not-evil/comment-page-1/#comment-996</link>
		<dc:creator>Aswath</dc:creator>
		<pubDate>Tue, 25 Mar 2008 02:08:08 +0000</pubDate>
		<guid isPermaLink="false">http://blog.enthinnai.com/2008/03/24/openid-providers-that-dont-consume-are-not-evil/#comment-996</guid>
		<description>Fazal:

I agree that some RPs will think along the same lines, some may go even further and require physical contact. Of course there will be some who don&#039;t require much. The varied requirement is the reason to separate the authentication function and the service function. This is the fundamental contribution of OpenID.</description>
		<content:encoded><![CDATA[<p>Fazal:</p>
<p>I agree that some RPs will think along the same lines, some may go even further and require physical contact. Of course there will be some who don&#8217;t require much. The varied requirement is the reason to separate the authentication function and the service function. This is the fundamental contribution of OpenID.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Fazal Majid</title>
		<link>http://blog.enthinnai.com/2008/03/24/openid-providers-that-dont-consume-are-not-evil/comment-page-1/#comment-995</link>
		<dc:creator>Fazal Majid</dc:creator>
		<pubDate>Tue, 25 Mar 2008 01:49:52 +0000</pubDate>
		<guid isPermaLink="false">http://blog.enthinnai.com/2008/03/24/openid-providers-that-dont-consume-are-not-evil/#comment-995</guid>
		<description>I would go further and say that because of their wide-open nature, Google, Yahoo or MSN issued OpenIDs are not worth much. All they provide to the relying party is some measure of confidence the user is a human (thereby obviating the need to participate in the CAPTCHA arms race) and provide an email without requiring the complex double-verified opt-in procedure you would have to use otherwise.

OpenID only provides the first A in AAA (authentication, authorization and accounting). OpenIDs issued by eBay have more value because they are tied to a valuable trust metric, the feedback (although eBay is shooting itself in the foot with the recently introduced no-seller-feedback policy).</description>
		<content:encoded><![CDATA[<p>I would go further and say that because of their wide-open nature, Google, Yahoo or MSN issued OpenIDs are not worth much. All they provide to the relying party is some measure of confidence the user is a human (thereby obviating the need to participate in the CAPTCHA arms race) and provide an email without requiring the complex double-verified opt-in procedure you would have to use otherwise.</p>
<p>OpenID only provides the first A in AAA (authentication, authorization and accounting). OpenIDs issued by eBay have more value because they are tied to a valuable trust metric, the feedback (although eBay is shooting itself in the foot with the recently introduced no-seller-feedback policy).</p>
]]></content:encoded>
	</item>
</channel>
</rss>

