OpenIDURL

1
(No Transcript)
2
OpenID(URL)
3
(No Transcript)
4
(No Transcript)
5
Check URL(OpenID)
6
Checkid_setup (User already logged in)
7
User Authentication Completed
8
Zooomr asks for URL(OpenID) and gets the page link
9
Does URL belongs to this user?
10
Problems and solutions

• What if one no longer trust Identity provider?
• Change two lines of code in your web-page
  URL/OpenID
• How does identity provider know who you are?
• Username/password Client SSL certificate
• What if identity provider's site is fake.
  (Phishing)
• Cardspace Microsoft's solution against phishing
• Verisign Native browser support to Open id
  seatbelt (plug-in with Firefox)