Is OpenID for Login on .Gov Sites a Cybersecurity Risk?
Yesterday morning, top government IT officials met in Washington DC to discuss 3rd party certification of private sector access to government agency websites.
The certification bodies (Trust Framework Providers), would evaluate OpenID and Info Card providers for use in logging into government agency websites. This would allow users to log in to government sites using favorite OpenID-supporting website credentials such as Google, AOL, Yahoo or other commercial accounts.
Technical details can be found in Marshall Kirkpatrick’s article, US Government Reviewing OpenID For Login on .Gov Sites.
However, some issues have been raised by government support for OpenID. OpenID Foundation board member Chris Messina mentioned the importance of protecting individual privacy while improving ease of use and convenience.
As Marshall puts it, “Government validation of federated identity could be a major boost for the ecosystem of the open, distributed web, and thus for innovation online. We hope the people making these plans can get it right and that the relevant government agencies can garner sufficient public support.”
Subscribe to the CyberSecurity Training and Awareness blog to be the first to learn about future Cybersecurity Training, Licensing, and Security Awareness Training solutions.


Comments
Post a comment
Commenting is not available in this section entry.