OpenID: Pros and Cons
A new article is available in the Web Security Digital Library on the Web single-sign on standard, OpenID. There are definite advantages and disadvantages of OpenID and this article discusses them. Here's an excerpt:
OpenID is a single sign-on system for Web applications. The standard is not controlled by any one vendor and services are free to end users. Web developers are relieved of building authentication systems from scratch and can take advantage of standards adopted by the likes of Google, IBM, Microsoft, AOL, and Verisign.If that were all that were to be said about OpenID then the standard would likely be a raging success; but there is more to the story. Concerns security vulnerabilities, phishing scams, and consolidated authentication information raises legitimate concerns. This article will examine three aspects of OpenID:
- Implementation and organizational issues related to single sign-on
- The advantages of the OpenID standards
- The disadvantages and potential drawbacks of the standard
You'll also find article son how to allocate your security budget, database security tools, data loss prevention and end user security.
Email This!
Digg it!
Sphere it!
Del.icio.us
Reddit!
Newsvine
