OpenID 2.0 security considerations

[Jeff Sonstein]

On Aug 23, 2006, at 12:37 PM, Johannes Ernst wrote:

> I'd strongly argue that the protocol should never "die" unless  
> absolutely necessary,
> but instead gracefully degrade.

<delurk/>

I could not resist chiming in with agreement on this point

Hans from Verisign makes some very important points
and
the general principle of graceful degradation is also very important
for operations in the myriad of real-world situations
which may require much more flexibility of negotiations and operations
than [for example] a bank

jeffs

--
"Crash programs fail because they
  are based on the theory that, with
  nine women pregnant, you can get
  a baby a month."
-- W. von Braun --
============
http://ariadne.iz.net/~jeffs/
http://www.it.rit.edu/~jxs/
http://www.xvrml.net/
http://ariadne.iz.net/~jeffs/jeffs.asc
http://jsonstein.livejournal.com/
http://www.it.rit.edu/~jxs/emailDisclaimer.html