Comments on Discovering the Net: OpenID is coming so get a Paypal Security Key

If you set up your own domain name or know where i...

2010-08-17T04:09:48.130-05:00

If you set up your own domain name or know where it is hosted, along with usernames and passwords for access, you can stop reading now. You still might want to do the first step below, just to confirm your domain is yours, but chances are everything is ok.

OpenID is doomed to failure. It's too damned c...

2010-03-30T09:24:30.062-05:00

OpenID is doomed to failure. It's too damned complicated. Will people pay for a security key? Not a chance.

I believe there is a better alternative - the Yubi...

2009-03-16T00:46:00.000-05:00

I believe there is a better alternative - the YubiKey - www.yubico.com

It's more convenient and more secure than a 6 digit OTP

It's a bit more expensive ($25), but all the source code is available for free.

There is at least one OpenID provider that supports it (clavid) and Google Apps can use it too.

"Other providers" can't support the PayPal tokens....

2008-09-26T10:49:00.000-05:00

"Other providers" can't support the PayPal tokens. The reason VeriSign is able to is that they're the backend provider for PayPal. If the secret key for a token were known by more than one provider, security takes a nose-dive . . .

I tend to agree that your SSN is not near as secur...

2008-01-22T09:19:00.000-06:00

I tend to agree that your SSN is not near as secure as many people hope but I think using your SSN would further impact the privacy concerns OpenID is also raising. Do you really want your OpenID provider to know every site you visit and I think that's the key reason that Yahoo, Google and Microsoft will want to be your OpenID provider that information has huge value.

Well that's not good. I mean if every provider li...

2008-01-20T17:29:00.000-06:00

Well that's not good. I mean if every provider like AOL and Yahoo are going to require you to have accounts with their key system then to me that just means. More secure but still the same problem that everyone has....to many accounts. I know they have to come to some type of agreement, but I wish everyone could just agree to go to one system. It would make life some much easier. I wonder if it would be worth it to subscribe to some service like LifeLock and just use your stinking SSN for your login ID+Open ID and go from there. I mean let's face it. Everyone has your SSN already. Just some additional thoughts.