946
edits
| Line 115: | Line 115: | ||
* Service implements OpenID attribute exchange to disclose information we hold (e.g., email address) | * Service implements OpenID attribute exchange to disclose information we hold (e.g., email address) | ||
* Provide sites with metadata about the strength and properties of the ID: | * Provide sites with metadata about the strength and properties of the ID: | ||
* First-party sign-in vs federated | ** First-party sign-in vs federated | ||
* Number of associated (verified) federated accounts | ** Number of associated (verified) federated accounts | ||
* User has been been subject to a captcha | ** User has been been subject to a captcha | ||
* Times since last ID verification or captcha | ** Times since last ID verification or captcha | ||
* Todo: determine if strength data disclosure requires user consent | * Todo: determine if strength data disclosure requires user consent | ||
* Todo: determine if we should pass through data from other services (e.g., user's Twitter username) | * Todo: determine if we should pass through data from other services (e.g., user's Twitter username) | ||
edits