Would you like to learn more about OWASP?

2009-02-09 Thread McGovern, James F (HTSC, IT)
The Hartford chapter will be broadcasting its meeting tomorrow. There will be a discussion from Mary Ruddy of Higgins. Register here: https://www2.gotomeeting.com/register/566470294 This communication, including attachments, is for the e

OWASP Certification

2008-08-15 Thread McGovern, James F (HTSC, IT)
Figured I would ask a somewhat offtopic question to see if anyone has thoughts. I am currently project leader for OWASP Certification Project (http://www.owasp.org/index.php/Category:OWASP_Certification_Project) which has on its roadmap, certification questions around identity. What types of

Re: OWASP Review

2008-03-10 Thread David Recordon
Hey James, I suppose there could be merit, but my guess is that if you want it to happen then you'll need to organize it. --David On Mar 10, 2008, at 1:38 PM, "McGovern, James F (HTSC, IT)" <[EMAIL PROTECTED] > wrote: > > Is there merit in having a third-party

OWASP Review

2008-03-10 Thread McGovern, James F (HTSC, IT)
Is there merit in having a third-party group such as OWASP (http://www.owasp.org) provide a third-party opinion that is public on the security of OpenID? Having large entities market OpenID will help spread the word even faster

RE: OWASP

2008-02-26 Thread McGovern, James F (HTSC, IT)
Sent: Tuesday, February 26, 2008 10:14 AM To: McGovern, James F (HTSC, IT) Cc: specs@openid.net Subject: Re: OWASP James, Considering that the majority of the individuals and organizations that have created the OpenID libraries do not have access to vast sums of cash to pay for these applications

Re: OWASP

2008-02-26 Thread John Ehn
2/26/08, McGovern, James F (HTSC, IT) <[EMAIL PROTECTED]> wrote: > > I would be curious to know if the implementers of the various OpenID > libraries have used tools such as Ounce Labs (www.ouncelabs.com), > Coverity (www.coverity.com) and others to ensure that the OWASP Top Te

OWASP

2008-02-26 Thread McGovern, James F (HTSC, IT)
I would be curious to know if the implementers of the various OpenID libraries have used tools such as Ounce Labs (www.ouncelabs.com), Coverity (www.coverity.com) and others to ensure that the OWASP Top Ten (www.owasp.org) doesn't