Eugene Tsyrklevich: OpenID: Single Sign-On For The Internet Black Hat Briefings, USA 2007 [Audio] Presentations From The Security Conference. podcast

内容由Black Hat/ CMP Media, Inc. and Jeff Moss提供。所有播客内容（包括剧集、图形和播客描述）均由 Black Hat/ CMP Media, Inc. and Jeff Moss 或其播客平台合作伙伴直接上传和提供。如果您认为有人在未经您许可的情况下使用您的受版权保护的作品，您可以按照此处概述的流程进行操作https://zh.player.fm/legal。

Black Hat Briefings, USA 2007 [Audio] Presentations from the security conference. «
Eugene Tsyrklevich: OpenID: Single Sign-On for the Internet

18+ y ago 58:05

MP3•单集首页

Tired of tracking your username and password across 169 Web 2.0 websites that you have registered with? Thinking of adding SSO to your webapp? Pen-testing a Web 2.0 app? Then come and learn about OpenID - a new decentralized Single Sign-On system for the web.
OpenID is increasingly gaining adoption amongst large sites, with organizations like AOL acting as a provider. In addition, integrated OpenID support has been made a mandatory priority in Firefox 3 and Microsoft is working on implementing OpenID 2.0 in Windows Vista. As OpenID adoption increases pace, the security of the protocol becomes of increasing importance.
This talk introduces OpenID, takes you through its demo and discusses the security of the underlying protocol. The talk will also introduce known attacks against OpenID such as phishing and some of the possible work arounds.

89集单集