What is OpenID?
Logging onto Wikitravel.org ➜
Redirect to case.edu for Authentication ➜
Authorize Information Release to Wikitravel.org ➜
Finish Wikitravel.org Registration ➜
Where Could OpenID Prove Useful?
Where Could OpenID Prove Useful?
Where Could OpenID Prove Useful?
Where Could OpenID Prove Useful?
- Hosted web apps
- a.k.a. "Software as a Service" or "SaaS"
- Nobody wants to have to (or remembers to) disable auxiliary accounts
Where OpenID Fails
- There is no verification that the data accompanying a user is valid (no trust)
Where OpenID Fails
- There is no verification that the data accompanying a user is valid (no trust)
- No mechanism to keep information up to date
Where OpenID Fails
- There is no verification that the data accompanying a user is valid (no trust)
- No mechanism to keep information up to date
- Won't stop spammers
- Provides no method for authorization
- Eminently phishable
