The recent Sony incident was another wake up call for website owners about the problems with passwords as discussed in the recent OIDF blog post. One of the purposes of the OpenID Foundation blog is to help identify events that website owners can attend to learn more about alternatives to passwords.
There was one such event, called the Cloud Identity Summit, earlier this year that was so popular that a smaller version of the event is being run in four cities in the next few weeks.
• 10/24/11 New York, NY
• 10/25/11 Washington, DC
• 11/2/11 Chicago, IL
• 11/3/11 San Francisco, CA
You can learn more or register to attend at www.cloudidentitysummit.com
The event will cover a number of topics that the OpenID Foundation is involved with including:
• Emerging standards such as OpenID Connect and its relation to OAuth
• User friendly ways to eliminate passwords using the Account Chooser technique
• Adoption of cloud identity standards in enterprise and citizen-government scenarios
If you’re a security architect, IT manager, SaaS product manager, eBusiness leader, CSO, CTO, or CIO leveraging the Cloud to change your business, it’s a day of identity security best practices you don’t want to miss.
November 13th, 2011 at 8:49 am
Who do I find out if someone as already used my name and emails for this open ID thing!!! Having trouble with a Hacker and not very good with computers!!! HELP PLEASSE
January 23rd, 2012 at 10:40 pm
Do you think this breach of security will deter people from wanting a one pass? For example: one card thats your drivers license, your social security card, your bank card, your credit card, and your passport all rolled into one. Personally I think it’s a bad idea but I’m curious your thoughts on the matter.
Thanks In Advance.
January 25th, 2012 at 9:33 am
Are there Cloud Identity Summit events planned in Europa ?
January 30th, 2012 at 5:13 pm
As far as I know, something similar is planned to be there. Check with http://www.cloudidentitysummit.com/
January 30th, 2012 at 5:22 pm
Personally, I think it is a bad idea to collapse all those credentials in one.
I am not going to deep dive on it now, but IMHO, services with different risk level should have different credentials.
Using “highly secure” credential for everything has unwanted cognitive load that leads the users to approve something they should not.