Slashdot Mirror


Alternatives To Microsoft Passport?

Passport-less asks: "With more and more Web sites requiring registration, I believe 'one login for multiple sites' services (like Microsoft Passport) will become more and more popular. Are they are open-source or community-based projects similar to Passport available? Passport's SDK is currently only available on Win2K (big surprise) -- although support for many UNIX-like platforms is planned in Q2 and Q3. I also don't like the idea of a profit-seeking corporation being in charge of a service like this especially Microsoft, considering their past security record. I also don't like their high fees, so I really think a community-oriented system with high deposits or bonds would be the best solution. Comments, anyone?"

2 of 11 comments (clear)

  1. Pasport is a bad thing by Citrix · · Score: 4
    Passport is simply a bad idea. It doesn't take much thought to realize how much info they could/would collect about you.

    Where you shop, when, how often you check your order tracking. Wouldn't be hard to know which prodcuts you clicked on the buy now button. It is bad enought that double click knows more about the surfing habits of my web browser then I really know. Do you want some one knowing that and dollar amounts with proof positive info to id you.

    NO!

    Don't support any passport type anything. Look at the US goverment. It is scary what they have on me. At least there are (legal) limitations on what info the IRS can ask the police for and the police can ask the fed for, etc...

    Personall I won't ever use any web service that requires a passport type service but there are people who like all their secrets exposed. How else does MTV get a cast for the real world/road rules.
    Citrix

    --
    Leknor
    http://Leknor.com
    "So many idiots, so few comets"
  2. Re:ZKey by thule · · Score: 3

    I work at Zkey. We're trying to take the idea of Passport to another level. The next version of the site will be completely crypto based (*much* more than it is in the current version). We will not be able to read the information unless you allow us to. SDK kits will be made available to Zkey enable your site. It will be based on XML so any platform should be able to participate as long as you have client SSL support. We will not let things pass over the net in the clear.
    Zkey's main idea is that information is *yours*. Who you give that information to is up to you and you alone. We're building the system in a distributed way because:
    1. The internet is distributed.
    2. You should have the choice on who you trust to store your encrypted information. Maybe you want to store it on your DSL connected computer. It shouldn't matter.

    For another take on the Zkey idea, take a look at http://www.openprivacy.org/. Zkey will hopefully become an implementation of OpenPrivacy. We're in talks with them to make sure we will comply.