OpenID compatibility

[zencocoon]

Hi,

Really nice service you have out here ;-) Well done !

On my side I may like to see a possibility for the clients to use them OpenID, which could allow them to be verified without any reregistration / validation process which is never joyful.

Bon boulot ;-)
P.S. : Yes, one more French around ;-)
--
  Sébastien Grosjean - ZenCocoon

[WorldSpot]

looks good...
I'll think about it.

Merci!

[WorldSpot]

There are 2 problems I see about openID:
- You are not required to use SSL (man in the middle, dns hack, etc..)
- OpenID providers are not certified by an authority. A malicious user could make his own openid provider and not give any verified information like email or other things to authenticate you. Hotspot providers are supposed to authenticate hotspot users in case of illegal activities...

I would not look for a simple single sign on system, but an authentication system.

[zencocoon]

I've check fast the specification again and that's seem effectively to be an actual problem.

I totally agree than security is more important than simple sign-on, registration, ... so let's forget about OpenID until it get more secured.