Security advisory to websites using OpenID Attribute Exchange

«By Mayank Upadhyay, Google Security Team
A group of security researchers recently identified a flaw in how some OpenID relying parties implement Attribute Exchange (AX) that could cause an authentication bypass vulnerability. Google is a strong supporter of federated login on the web and w…»   » source  |  + cache
 

See original post by Xchange