Comment 8 for bug 532055

Revision history for this message
Martin Owens (doctormo) wrote : Re: Trusted credential-management apps are broken and doomed

The way openid works means you can't have the consumer giving the password to the id provider. It breaks the trigon of trust.

Although you could have an openid service based on something other than a password, we were talking about ssh and pgp keys in IRC. But other things are just as valid.