[Opensim-dev] Proposal for using OpenID in OpenSim

[The Burnman]

My concern, much like what Melanie stated, is that I do not want to be
forced to use a 3rd party service to use OpenSim.  If OpenID is not an
optional module, I will drop OpenSim from my toolset and move on to
something else.

Aside from the idea of being forced to use 3rd party services, two concerns
I have about using OpenID are:

1) Data security and integrity - With no control over authentication or
storage of related data, what's to say data won't be stolen or corrupted,
thus causing my clients/users distress and thus causing me a nightmare?

2) Service perpetuality (I might have made that word up) - What guarantees
OpenID will remain in business in a year, considering how volatile the
Internet business world is?  How much downtime do I have to deal with
because of maintenance or hardware failure?

In fact, I don't know why people think OpenID is a good idea at all.  The
whole concept is based on trusting a 3rd party to remain up 100% of the
time, completely secure, and functioning efficiently.  Using OpenID takes
any control of those variables out of my hands, and if they have an issue,
my service is offline.

Sure, it allows some level of interoperability, but I don't consider it
worth the risk for my projects.  Just do a Google search for "OpenID
security" (or similar search parameters) and read about the concerns a lot
of people have about OpenID.

On Thu, Mar 27, 2008 at 9:33 PM, Ryan McDougall <ryan at 3di.jp> wrote:

> My understanding is that, like OpenID is currently used on the web,
> which is you could use OpenID if you have one, or the old-fashion type
> if you don't.
>
> However, with OpenID > 1.0, it is possible to add attributes, so OpenID
> in OpenSim is a means of avatar portability, since one of the attributes
> would be a URL to where your avatar can be found.
>
> That can't be done the old fashioned way.
>
> What specifically is your concern about OpenID?
>
> Cheers,
>
> On Wed, 2008-03-26 at 23:57 -0400, The Burnman wrote:
> > And I take it we are still on the "optional module" page in reference
> > to OpenID, yes?
> > _______________________________________________
> > Opensim-dev mailing list
> > Opensim-dev at lists.berlios.de
> > https://lists.berlios.de/mailman/listinfo/opensim-dev
> --
> Software Engineer
> http://www.3di.jp
>
> The opinions expressed herein represent those of the individual, and do
> not constitute company policy unless expressly stated.
>
> _______________________________________________
> Opensim-dev mailing list
> Opensim-dev at lists.berlios.de
> https://lists.berlios.de/mailman/listinfo/opensim-dev
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://opensimulator.org/pipermail/opensim-dev/attachments/20080327/4868e566/attachment-0001.html>