Computer Security Awareness Training

Keynotes: Blog & News

Blog Home

Is OpenID for Login on .Gov Sites a Cybersecurity Risk?

Robert Hodges August 11, 2009 Post a Comment

Yesterday morning, top government IT officials met in Washington DC to discuss 3rd party certification of private sector access to government agency websites.

The certification bodies (Trust Framework Providers), would evaluate OpenID and Info Card providers for use in logging into government agency websites. This would allow users to log in to government sites using favorite OpenID-supporting website credentials such as Google, AOL, Yahoo or other commercial accounts.

Technical details can be found in Marshall Kirkpatrick’s article, US Government Reviewing OpenID For Login on .Gov Sites.

However, some issues have been raised by government support for OpenID. OpenID Foundation board member Chris Messina mentioned the importance of protecting individual privacy while improving ease of use and convenience.

As Marshall puts it, “Government validation of federated identity could be a major boost for the ecosystem of the open, distributed web, and thus for innovation online. We hope the people making these plans can get it right and that the relevant government agencies can garner sufficient public support.”

Subscribe to the CyberSecurity Training and Awareness blog to be the first to learn about future Cybersecurity Training, Licensing, and Security Awareness Training solutions.

Comments

Post a comment

Commenting is not available in this section entry.