Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
The FAQ recommends I don’t do local verification of BrowserID (persona) security assertions, however I’ve never been good at following instructions.
So… I want to implement local verification anyway. It looks like the only thing the client libraries pass to the server side is a block of encrypted stuff called an “assertion”. Presumably it is encrypted or signed using some public key encryption scheme, but I’m having trouble finding any details.
Can anyone explain it, or point me to the details?
The spec is currently not up to date with the latest data format changes, but this Python library has the ability to verify Persona assertions by itself (i.e. not using verifier.login.persona.org):
http://pypi.python.org/pypi/PyBrowserID