Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I currently have one OpenID that I use from a provider, it's something like:

However, I want to be able to type the address of my personal website instead of the OpenID, yet still be able to use as the OpenID provider. It seems I can do this via OpenID delegation, by adding the right meta tags to my personal home page, I can redirect it to my OpenID provider.

However, since my personal home page is public, I'm worried about other users visiting my site and grabbing my OpenID. Is this something I should be worried about?

share|improve this question
It gives people just one more piece of the puzzle to hack you. I wouldn't: – hyperslug Oct 5 '09 at 20:16
@hyperslug, you wouldn't? but you advertise your email in your profile. It can be hacked the same way. – John T Oct 6 '09 at 0:05
@John, it depends on what's being protected by that OpenID. One's bank might be protected by SSL, yet it's unwise to post your login id + bank. – hyperslug Oct 6 '09 at 9:04
someone can grab your openid details if they got access to your email. – John T Oct 6 '09 at 10:40
@John, that's true, so I also wouldn't advocate exposing an email address connected to your OpenID, which the one in my profile isn't. – hyperslug Oct 6 '09 at 16:42
up vote 6 down vote accepted

Just ensure your OpenID has a secure password. It's as secure as anything else over https that's password protected.

share|improve this answer

Someone looking at the code of your site could then figure out that MiffTheFox uses that OpenID server. So what? You tell every web site you log into that anyway. The actual OpenID verification, as John T. says, is protected by SSL.

share|improve this answer
Exactly. Everyone advertises their email all over the web, it's only protected by a password as well. – John T Oct 5 '09 at 21:40

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .