<div dir="ltr">On Fri, Mar 29, 2013 at 6:39 AM, Michael B. Trausch <span dir="ltr"><<a href="mailto:mbt@naunetcorp.com" target="_blank">mbt@naunetcorp.com</a>></span> wrote:<br><div class="gmail_extra"><div class="gmail_quote">
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="im">On 03/28/2013 09:26 PM, David Tomaschik wrote:<br>
> This is true, but it also provides *one provider* who you need to trust<br>
> with security, not every site. You can run that provider yourself with<br>
> OpenID. So, OpenID (or centralized authentication in general) reduces<br>
> the attack surface, but increases the damage from a successful attack.<br>
<br>
</div>I'm surprised at you, David! Such a blanket statement. That also<br>
depends on what one has in place to _mitigate_ compromise. I think that<br>
anyone who puts any system in place and then does not plan for it to be<br>
compromised is missing the whole point of security. Assume it will<br>
break. Mitigate what can happen when it does.<br>
<br></blockquote><div><br></div><div style>Assuming you have >1 service using that OpenID provider, the damage from compromising the OpenID account is, by definition, more than a compromise of one of those accounts. I never said that it results in a complete loss of control.</div>
<div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">One reason why I keep my personal IDs and work IDs separate. If someone<br>
compromises one, they cannot compromise the other.<br>
<br></blockquote><div><br></div><div style>I choose to use my email account to authenticate a *lot* of things (whether by password reset capabilities or SSO). If my email account gets compromised, I have much bigger problems than logging into some eLearning site. (For example, I do not use a dedicated account on stackexchange, just use SSO, but that's obviously less valuable than the email account they'd have to compromise to get access to that.)</div>
<div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
At work, I use two---one with and one without "privilege". Good<br>
separation of concerns there. One exception to that is my workstation,<br>
where my normal unprivileged ID does carry sudo privilege on this single<br>
system.<br>
<br>
After a certain point, all you can do is mitigate damage. You can do<br>
that, though, by so many different methods as to make that a whole tome<br>
(or volumes of them!).<br>
<div class="HOEnZb"><div class="h5"><br>
--- Mike<br>
<br>
--<br>
Michael B. Trausch, President<br>
Naunet Corporation<br>
<br>
Telephone: <a href="tel:%28678%29%20287-0693%20x130" value="+16782870693">(678) 287-0693 x130</a><br>
Toll-free: <a href="tel:%28888%29%20494-5810%20x130" value="+18884945810">(888) 494-5810 x130</a><br>
FAX: <a href="tel:%28678%29%20287-0693" value="+16782870693">(678) 287-0693</a><br>
<br>
</div></div><br>_______________________________________________<br>
Ale mailing list<br>
<a href="mailto:Ale@ale.org">Ale@ale.org</a><br>
<a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a><br>
See JOBS, ANNOUNCE and SCHOOLS lists at<br>
<a href="http://mail.ale.org/mailman/listinfo" target="_blank">http://mail.ale.org/mailman/listinfo</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br>David Tomaschik<br>OpenPGP: 0x5DEA789B<br><a href="http://systemoverlord.com" target="_blank">http://systemoverlord.com</a><br><a href="mailto:david@systemoverlord.com" target="_blank">david@systemoverlord.com</a>
</div></div>