Update on OpenID - CSRF attacks
Follow up on the OpenId post last week. Pdp has warned us against CSRF attacks against OpenId functionality:
“I hope that you understand the impact of this issue as it is one of the main things you will see when you deal with OpenID enabled systems. OpenID does make life easier bur if you don’t implement the infrastructure properly, you are asking for some serious trouble. “
More information online, recommended reading.