the paradox of identity (why openid is evil)

The Paradox of Identity(why OpenID is Evil)

Brad Templeton

Electronic Frontier Foundation

(& Foresight Institute)

brad@eff.org

Why does it matter?

Bad Science

History of humanity is a long chorus of police states punctuated by a few recent stacatto notes of

freedom.

We must take care not to build the infrastructure of a police state

We must consider the balance, and think when we change it

And we’re really shifting the balance

Facebook reversed signup dynamic

Erasure of 4th amendment

Architecture will set defaults

Nobody cares about privacy until after invaded

Ease of Use is a Bug

Mag stripe on your driver’s licenceLong web form is impediment

End-User control prevents negotiation

• Negotiated vs. non-negotiated• Negotiation only happens with power• What’s the history of success? P3P?

Agents? Reputations?• Bizarrely, Passport could have done better!• Proxies

Two choices:

• Let the TFH have their way, there are few of them, it costs us little

• Too many TFH: Agree with what we wan't or go away

Data exported is data lost

Data Portability or BEPSI

Time travelling robots from the future

China, Saudi Arabia, Future China

Falun Gong on Facebook