A simple solution to OpenID phishing attacks

nospam@example.com (Charles Darke) — Tue, 23 Jan 2007 22:31:28 +0000

I'm currently testing a simple fix to prevent phishing attacks on OpenID from malicious relying parties.

The idea is simple: I have a static IP address and so instead of asking for a password, I've modified an IdP to authorise by checking my IP instead of requesting a password. This has the obvious disadvantages of requiring a static IP and limiting you to posting from home. [Continued: A simple solution to OpenID phishing attacks]

Anonymous OpenID server now available

nospam@example.com (Charles Darke) — Mon, 22 Jan 2007 13:39:57 +0000

Anybody wanting to bypass OpenID by using a temporary OpenID can now do so using an anonymous OpenID provider. [Continued: Anonymous OpenID server now available]

Digital Consumption - Tagged: OpenID

A simple solution to OpenID phishing attacks

Anonymous OpenID server now available