Re: [development] OpenId open to phishing attacks.

On Wednesday 07 November 2007 17:58, J-P Stacey wrote:

Unless you're running your own OpenID *server* then this isn't an issue. Looking at the module page I don't think that's in 5.x yet, let alone core.

Thanks. I thought Drupal could act as a server.... Oh. I see what you mean. http://drupal.org/project/openid says the server code is in 4.7. http://drupal.org/node/144050 Here are some references for those interested: server module? (feature request) http://drupal.org/node/185272 Port 4.7-2.x to Drupal 5 http://drupal.org/node/126841 PHP-based OpenID Server code http://groups.drupal.org/node/1109 Augustin.