ie8 fix

Linux and Open Source

Steven J. Vaughan-Nichols & Paula Rooney

OpenID biggest government boost yet for open source

By | September 9, 2009, 1:31pm PDT

Summary: All this means opponents of the current Administration are bound to see OpenID as some sort of “mark of the beast.” But if Bush did it Democrats would feel that way, so you can’t win.

In the biggest government boost to open source yet, the U.S. government has endorsed OpenID.

OpenID is a confederated identity system meant to let you enter many sites without worry about passwords. The code libraries needed to implement the system is available under a number of technologies, and a number of different licenses.

The most common license being used now is Apachev2, but there are also implementations under the MIT, BSD, and even the MS-PL licenses. The OpenID site lists the license for SqueakSource as unknown.

The program announced by U.S. CIO Vivek Kundra is a pilot program, which will let citizens with OpenID authentication to use government Web sites.

Chris Messina (pictured from his Web site) wrote the blog post announcing the government move, which includes examples of where it can be useful, as when you want to book a camp ground or save a search at the NIH concerning a loved one’s cancer diagnosis.

“Do you really want to create yet another account (that you’ll probably never use again) just to reserve a campsite? Probably not,” he writes.

Of course, all this means opponents of the current Administration are bound to see OpenID as some sort of “mark of the beast.” But if Bush did it Democrats would feel that way, so you can’t win.

Personally I’d love to have a stable digital identity that did not require me to memorize hundreds of different passwords, and whose implementations were covered by open source licenses. Would you?

Kick off your day with ZDNet's daily e-mail newsletter. It's the freshest tech news and opinion, served hot. Get it.

Topics

Dana Blankenhorn has been a business journalist for 30 years, a tech freelancer since 1983.

Disclosure

Dana Blankenhorn

Dana Blankenhorn has been a journalist, writer and part-time futurist for over 30 years.

At the present moment I run only a personal blog in addition to my ZDNet open source blog.

DanaBlankenhorn.Com has the subtitle The War Against Oil. In the past I have used it to write about political history, e-commerce, personal matters, some ideas related to open source, and The World of Always On, which is the idea of using sensors, motes and RFID to turn WiFi links into platforms for applications which live in the air.

My IRA account at Schwab holds a few tech shares, most notably some Intel and Applied Materials, but there are no open source companies in it. I don’t even own any CBS stock.

Biography

Dana Blankenhorn

Dana Blankenhorn has been a business journalist for nearly 25 years and has covered the online world professionally since 1985. He founded the Interactive Age Daily for CMP Media, and has written for the Chicago Tribune, Advertising Age's "NetMarketing" supplement, and dozens of other publications over the years.

4
Comments

Join the conversation!

Just In

RE: OpenID biggest government boost yet for open source
factoryjoe 14th Sep 2009
Fortunately OpenID doesn't specify how you authenticate a
user, so, presuming an identity provider meets the criteria
specified in the Trust Framework co-developed between the
government, OpenID and Information Card foundations, a
user can authenticate using n+1 factors of authentication,
including out of band tokens (i.e. receive a PIN to your cell
phone), biometrics, or other methods.

Certainly we need to be concerned for the security of the
user, but sticking with current common practice of having
the user share their "default password(s)" with government
sites is also untenable.

With OpenID, getting users to have FEWER passwords and to
TYPE them less frequently, we can arrive at a somewhat
more secure situation.
resetting your Yahoo, Google, MSN, or AOL account
and taking control of your identity. Of course it
also has to be easy for the REAL owner to recover
his password if he forgets it. Open ID is great,
but, the weak link is people being able to reset
the password all too easily.

Remember Sarah Palin.
0 Votes
+ -
I think they're aware of it.
DanaBlankenhorn 9th Sep 2009
Proving identity remains a problem in all areas of electronic life. Open source deserves its opportunity to try.
0 Votes
+ -
RE: OpenID biggest government boost yet for open source
hvyhorse@... Updated - 10th Sep 2009
It is an interesting approach but like most security schemes the weak point is the user. Till someone figures out a fix for that failure is almost inevitable.
Fortunately OpenID doesn't specify how you authenticate a
user, so, presuming an identity provider meets the criteria
specified in the Trust Framework co-developed between the
government, OpenID and Information Card foundations, a
user can authenticate using n+1 factors of authentication,
including out of band tokens (i.e. receive a PIN to your cell
phone), biometrics, or other methods.

Certainly we need to be concerned for the security of the
user, but sticking with current common practice of having
the user share their "default password(s)" with government
sites is also untenable.

With OpenID, getting users to have FEWER passwords and to
TYPE them less frequently, we can arrive at a somewhat
more secure situation.

Join the conversation!

Formatting +
BB Codes - Note: HTML is not supported in forums
  • [b] Bold [/b]
  • [i] Italic [/i]
  • [u] Underline [/u]
  • [s] Strikethrough [/s]
  • [q] "Quote" [/q]
  • [ol][*] 1. Ordered List [/ol]
  • [ul][*] · Unordered List [/ul]
  • [pre] Preformat [/pre]
  • [quote] "Blockquote" [/quote]
ie8 fix

The best of ZDNet, delivered

ZDNet Newsletters

Get the best of ZDNet delivered straight to your inbox

Facebook Activity

White Papers, Webcasts, & Resources
ie8 fix