3 ms·

I was always worried it'd be trivially easy to phish OpenID... I never even signed up for one.

• riffraff 16y ago
  not really. Consider for example yahoo's implementation: when I get redirected to Y! for login, I have my personal login seal on the page that grants me that I am actually talking to yahoo and not some scam site.
  • stonemetal 16y ago
    What about man in the middle?(Go to yahoo get your image and display it for you.) Heck even pass your credentials through to yahoo to verify that you gave me the correct credentials.
    • riffraff 16y ago
      I believe that falls out of the definition of "trivially easy to phish"