<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Joseph Wilk &#187; Security</title>
	<atom:link href="http://blog.josephwilk.net/tag/security/feed" rel="self" type="application/rss+xml" />
	<link>http://blog.josephwilk.net</link>
	<description>on AI, The Web, Usability, Testing &#38; Software process</description>
	<lastBuildDate>Wed, 10 Mar 2010 23:18:31 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.1</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>OpenId</title>
		<link>http://blog.josephwilk.net/critique/openid.html</link>
		<comments>http://blog.josephwilk.net/critique/openid.html#comments</comments>
		<pubDate>Sun, 11 Nov 2007 14:19:47 +0000</pubDate>
		<dc:creator>Joseph Wilk</dc:creator>
				<category><![CDATA[Critique]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://www.joesniff.co.uk/wordpress/uncategorized/openid.html</guid>
		<description><![CDATA[OpenID is an open loosely distributed single sign on protocol. It looks at why Microsoft&#8217;s single sign on has not taken off on a large scale. Concluding that no-one wants a single company storing all details, hence create a distributed single sign-on protocol.
OpenIDs take the form of URLS:
exampleuser.livejournal.com
OpenID 1.1 Protocol Summary
OpenID specifications &#124;http://openid.net/specs.bml
The openid protocol [...]]]></description>
		<wfw:commentRss>http://blog.josephwilk.net/critique/openid.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Curl and Certificates with Windows PHP</title>
		<link>http://blog.josephwilk.net/snippets/curl-and-certificates-with-windows-php.html</link>
		<comments>http://blog.josephwilk.net/snippets/curl-and-certificates-with-windows-php.html#comments</comments>
		<pubDate>Tue, 06 Nov 2007 12:11:30 +0000</pubDate>
		<dc:creator>Joseph Wilk</dc:creator>
				<category><![CDATA[Snippets]]></category>
		<category><![CDATA[PHP]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://www.joesniff.co.uk/wordpress/php/curl-and-certificates-with-windows-php.html</guid>
		<description><![CDATA[Curl on a Windows PHP installation does not know where to look for certificates. Hence when you try and curl a https url it fails. The default value for CURLOPT_SSL_VERIFYPEER is true which means curl will always try and validate ssl by default. I discovered this while working with an OpenID library (v1.2.3):
http://openidenabled.com/php-openid/
There is the [...]]]></description>
		<wfw:commentRss>http://blog.josephwilk.net/snippets/curl-and-certificates-with-windows-php.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
