(2007-01-15) Willison Open Id Limits

Simon Willison clarifies some of the limits of OpenID. Just because the OpenID authentication was successful doesn't mean that the user is the only person who can authenticate against that OpenID... The key thing here is that you should never trust an OpenID on its own. It could be a real person, or it could be a spammer, psycopath or general undesirable.