On 7/3/11 10:30 AM, "Sam Hartman" <[log in to unmask]> wrote:
>A huge difference is that you may very well get 20-30 requests in a
> row to the same service.
>I think using GSS without associations is incredibly impractical.
Right; this is like using an email client with a two-factor token and
having it connect multiple times. I take your point.
>My argument is roughly that you need to have some mechanism to put the
>selector into always-reconfirm mode that is well understood. Nothing
>we're talking about here seems to avoid that requirement. Once you have
>something that your users understand to put things into a mode where it
>is always reconfirming associations, it seems that you can be more
>aggressive about making the associations.
At least in the web case, we have not managed to come up with any. It's
technically easy (you visit a URL), but we have no way to make the URL