There's been a fair bit of mailing-list discussion recently about implementing of an OpenID token within an Infocard profile. On the face of it, there are four readily-identifiable reasons why one might want to try this:
1 - to capitalise on the probability that Cardspace will grow in pervasiveness;
2 - to see whether it benefits from the addition of OpenID-style flexibility;
3 - to see whether, conversely, OpenID's much-discussed phishability can be reduced by using a different vector for its tokens;
4 - as a more general experiment in 'interworking' between different current identity technologies.
On 3 and 4, at least, the results seem positive. However, Gerry offers a balanced and penetrating analysis of the over-all project here, which I recommend.
If I can paraphrase his conclusions very roughly: 'it's an interesting and useful experiment, but tends to fail the "so what?" test. It is unlikely to improve user security, because technical limitations mean users are unlikely to form an accurate view of the extent to which they are protected or not.'
![[RSS Newsfeed]](/themes/sotto/images/valid-rss.png)
![[This is a Roller site]](/themes/sotto/images/roller-logo.gif){kind=logo}