Many in the open standards community have a “what have you done for me lately” chip implanted deep in their programming souls. It’s logical to want the evolution of OpenID technology to keep up with the rate of its adoption. We all want the pace of technology improvement to map […]
The OpenID Foundation (OIDF), the open standard community dedicated to driving the development and broad adoption of OpenID technology, today announced that the Intel Application Security and Identity Products Group has joined the Foundation. By joining the OIDF, Intel is demonstrating their support for OpenID as a solution of choice […]
A group of security researchers identified a flaw in how some OpenID relying parties implement Attribute Exchange (AX). See below for information on the suggested fix. The researchers determined that some sites were not confirming that the information passed through AX was signed. That allows an attacker to modify the […]
IIW is rapidly approaching. We plan to take advantage of face to face discussions on the around the next version of openID. For those attending and others I want to point to the various potions of the spec work so that people have that in hand for IIW. One of […]
The OpenID Foundation’s 2011 series of OpenID Summits focus is on use cases and topics of interest to key developers, executives and analysts in the identity industry. The OpenID Summit in Munich will focus on global adoption dynamics and the evolution of OpenID technologies. It is a free event co-sponsored […]
Sign up now for the OpenID Summit “Balancing Security and the User Experience” on May 2 The OpenID Foundation’s 2011 series of OpenID Summits focus on use cases and topics of interest to developers, executives and analysts in the identity industry. The next summit explores security and the user experience […]
I can die now that I’ve been a talking head on NPR! Allow me to rewind for a minute. On Tuesday, March 15 I had the privilege of appearing on Washington D.C.’s NPR radio station, WAMU, and the Kojo Nnamdi Show on “Cyber Security and Your Internet Identity”. Replay My […]
The OpenID Foundation’s 2011 series of OpenID Summits focus on use cases and topics of interest to key developers, executives and analysts in the identity industry. The next summit explores security and the user experience in open identity technologies. It is co sponsored by Google and Symantec and will take […]
by Don Thibeau I was a close reader of the commentary from Scott Gilbertson of Wired’s WebMonkey and some other posts of late. I appreciated the historical context the Forester Analysts provided; noting that when OpenID appeared on the scene, more robust solutions based on SAML under way in scenarios […]
by Don Thibeau There has been much discussion lately about the US National Strategy on Trusted Identity in Cyberspace, NSTIC. This is a summary of some key developments. Last week in Washington DC, a series of workshops addressed various aspects of the evolving US NIST. The first focused on use […]