[governance] Re: Identity systems and privacy (was Re: New IGF community site)

[Norbert Bollow]

Stephane Bortzmeyer <bortzmeyer at internatif.org> wrote:
> An OpenID provider is not an *outside* third party since you choose
> it. Like an Internet access provider, it is a party you have to trust,
> at least partially.

What I'm opposing is the totally needless introduction of an
additional "party you have to trust" into the system, especially
in view of the fact that determining the trustworthiness of a
third-party OpenID provider is (if possible at all) much more
difficult that being your own OpenID provider.

> > "Being your own OpenID provider" is AFAIK not possible behind NAT.
> 
> Well, anyway, it is not realistic for most users, even with a public
> IP address. My point was not that Joe Average should become his own
> identity provider, but that many people can do it, so Joe Average will
> have a large choice of providers, probably with at least one with a
> privacy practice he likes.

Greetings,
Norbert.


-- 
Norbert Bollow <nb at bollow.ch>                      http://Norbert.ch
President of the Swiss Internet User Group SIUG    http://SIUG.ch
Working on establishing a non-corrupt and
truly /open/ international standards organization  http://OpenISO.org
____________________________________________________________
You received this message as a subscriber on the list:
     governance at lists.cpsr.org
To be removed from the list, send any message to:
     governance-unsubscribe at lists.cpsr.org

For all list information and functions, see:
     http://lists.cpsr.org/lists/info/governance