Comments on: OpenID for all Estonians http://notsorelevant.com/2007-05-22/openid-for-all-estonians/ no expert in technology Fri, 21 Nov 2008 21:35:37 +0000 http://wordpress.org/?v=abc By: Privacy and Identity Theft » Blog Archive » Estonia issuing Smart-cards for OpenID logins? http://notsorelevant.com/2007-05-22/openid-for-all-estonians/#comment-4591 Privacy and Identity Theft » Blog Archive » Estonia issuing Smart-cards for OpenID logins? Sat, 26 May 2007 20:08:09 +0000 http://www.notsorelevant.com/2007-05-22/openid-for-all-estonians/#comment-4591 [...] is some hyperbole about this Estonian OpenID rollout. Some claim that smartcards prevent phishing, and that is not completely accurate. There’s [...] [...] is some hyperbole about this Estonian OpenID rollout. Some claim that smartcards prevent phishing, and that is not completely accurate. There’s [...]

]]> By: OLDaily[中文版] » Blog Archive » 2007å¹´5月24æ—¥ http://notsorelevant.com/2007-05-22/openid-for-all-estonians/#comment-4587 OLDaily[中文版] » Blog Archive » 2007å¹´5月24æ—¥ Fri, 25 May 2007 17:53:57 +0000 http://www.notsorelevant.com/2007-05-22/openid-for-all-estonians/#comment-4587 [...] 这里有更多内容介，包括对问题的评述。Simon Willison, Weblog May 24, 2007 [...] [...] 这里有更多内容介，包括对问题的评述。Simon Willison, Weblog May 24, 2007 [...]

]]> By: Tara (PassPack) http://notsorelevant.com/2007-05-22/openid-for-all-estonians/#comment-4586 Tara (PassPack) Fri, 25 May 2007 15:39:24 +0000 http://www.notsorelevant.com/2007-05-22/openid-for-all-estonians/#comment-4586 > "While the eID seems to be a very comfortable authentication tool privacy issues occur, of course." This is what I'm most concerned about. I posted about it here: http://passpack.wordpress.com/2007/05/25/openid-a-great-thing-going-amok/ Cheers, Tara > “While the eID seems to be a very comfortable authentication tool privacy issues occur, of course.”

This is what I’m most concerned about. I posted about it here:
http://passpack.wordpress.com/2007/05/25/openid-a-great-thing-going-amok/

Cheers,
Tara

]]> By: OpenID: A great thing... going amok? « PassPack - The Blog http://notsorelevant.com/2007-05-22/openid-for-all-estonians/#comment-4585 OpenID: A great thing... going amok? « PassPack - The Blog Fri, 25 May 2007 15:33:35 +0000 http://www.notsorelevant.com/2007-05-22/openid-for-all-estonians/#comment-4585 [...] 25th, 2007 I recently came across Carsten Pötter’s post OpenID for all Estonians wherein he writes about a nationwide implementation of OpenID in Estonia. Citizens and foreign [...] [...] 25th, 2007 I recently came across Carsten Pötter’s post OpenID for all Estonians wherein he writes about a nationwide implementation of OpenID in Estonia. Citizens and foreign [...]

]]> By: Martin Paljak http://notsorelevant.com/2007-05-22/openid-for-all-estonians/#comment-4580 Martin Paljak Thu, 24 May 2007 23:40:27 +0000 http://www.notsorelevant.com/2007-05-22/openid-for-all-estonians/#comment-4580 I finally found some time and willingness to write a blog post in English. It covers the same subject and might be of interest. <a href="http://martin.paljak.pri.ee/2007/05/25/openid-smart-cards-and-security-risks/">http://martin.paljak.pri.ee/2007/05/25/openid-smart-cards-and-security-risks/</a> I finally found some time and willingness to write a blog post in English. It covers the same subject and might be of interest. http://martin.paljak.pri.ee/2007/05/25/openid-smart-cards-and-security-risks/

]]> By: pauldwaite http://notsorelevant.com/2007-05-22/openid-for-all-estonians/#comment-4579 pauldwaite Thu, 24 May 2007 22:09:52 +0000 http://www.notsorelevant.com/2007-05-22/openid-for-all-estonians/#comment-4579 > I guess I have to erase the word “impossible� from my vocabulary now. When describing how easy it is to break into any computer system, then yeah, I think so :) > I guess I have to erase the word “impossible� from my vocabulary now.

When describing how easy it is to break into any computer system, then yeah, I think so :)

]]> By: Carsten Pötter http://notsorelevant.com/2007-05-22/openid-for-all-estonians/#comment-4578 Carsten Pötter Thu, 24 May 2007 21:35:38 +0000 http://www.notsorelevant.com/2007-05-22/openid-for-all-estonians/#comment-4578 I guess I have to erase the word <em>impossible</em> from my vocabulary now. I guess I have to erase the word impossible from my vocabulary now.

]]> By: Mark Wilcox http://notsorelevant.com/2007-05-22/openid-for-all-estonians/#comment-4577 Mark Wilcox Thu, 24 May 2007 21:03:11 +0000 http://www.notsorelevant.com/2007-05-22/openid-for-all-estonians/#comment-4577 I've written my own response here with examples of how this system could break at http://blogs.oracle.com/mwilcox/2007/05/24#a149 I’ve written my own response here with examples of how this system could break at
http://blogs.oracle.com/mwilcox/2007/05/24#a149

]]> By: Anon http://notsorelevant.com/2007-05-22/openid-for-all-estonians/#comment-4576 Anon Thu, 24 May 2007 21:02:50 +0000 http://www.notsorelevant.com/2007-05-22/openid-for-all-estonians/#comment-4576 I think that the smart cards are a form of 2FA. So only 1 part of the 2 factors is ever exposed. Even if a MITM was to intercept a request the value is only valid for that point in time so useless when trying to replay a request or use it another time. That's probably a simplification of how it works... I think that the smart cards are a form of 2FA. So only 1 part of the 2 factors is ever exposed. Even if a MITM was to intercept a request the value is only valid for that point in time so useless when trying to replay a request or use it another time. That’s probably a simplification of how it works…

]]> By: Carsten Pötter http://notsorelevant.com/2007-05-22/openid-for-all-estonians/#comment-4572 Carsten Pötter Thu, 24 May 2007 16:45:50 +0000 http://www.notsorelevant.com/2007-05-22/openid-for-all-estonians/#comment-4572 Well, <a href="http://simonwillison.net/2007/May/24/openid/">Simon Willison is asking a similar question</a>. So am I really completely wrong? As far as I know scammers need a smart card as well to log in even if they know my password. Anyone more knowledegable about smart cards than me? Well, Simon Willison is asking a similar question. So am I really completely wrong? As far as I know scammers need a smart card as well to log in even if they know my password.

Anyone more knowledegable about smart cards than me?

]]>