What are the main reasons for having a federated identity system such as OpenID over having identities based purely on a public key?

OpenID uses an Identity Provider to confirm that a user owns a particular URL. Why not use a public key identifier. If the user can decrypt information encrypted with the public key, then they must own that public key. This would remove the need for identity providers and give users complete control over their own Identity.

1 Answer 1


The simple answer is that of course you could do that but then you would have to manage the infrastructure to cope with key management, and some organisations do exactly that.

It is a challenge, though, at large scale, so why not offload some of that onto a trusted provider? That way they can focus on the identity management and you can focus on your business.

Simple outsourcing model in many respects.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .