Beefy Boxes and Bandwidth Generously Provided by pair Networks
Perl: the Markov chain saw

Re: PerlMonks OpenID provider?

by b10m (Vicar)
on Sep 23, 2008 at 11:21 UTC ( #713198=note: print w/ replies, xml ) Need Help??

in reply to Re^2: PerlMonks OpenID provider?
in thread PerlMonks OpenID provider?

"To me it does matter. If it's not secure, somebody could easily log in as moritz, and with a few writeups could destroy the reputation (and perhaps even trust) that I built by writing more than 2000 posts."

Right, I see why having your account broken into is something that bothers you (and me), but that could happen in any other form as well (again: Yahoo! Palin. Mail). First of all, the "attacker" has to guess which provider you used (obscurity, yes never good). In this case, Perlmonks would be an easy guess.

Secondly, the "attacker" needed to somehow authenticate at Perlmonks with your credentials. So, rather than fearing OpenID being insecure, you really shouldn't trust Perlmonks security. So here it boils down to what OpenID provider you trust.

I haven't seen stories where OpenID was spoofed (if you have stories, please let me know). I can only think of DNS attacks (?).


Comment on Re: PerlMonks OpenID provider?

Log In?

What's my password?
Create A New User
Node Status?
node history
Node Type: note [id://713198]
and the web crawler heard nothing...

How do I use this? | Other CB clients
Other Users?
Others imbibing at the Monastery: (12)
As of 2015-11-25 20:51 GMT
Find Nodes?
    Voting Booth?

    What would be the most significant thing to happen if a rope (or wire) tied the Earth and the Moon together?

    Results (690 votes), past polls