On Mon, Jul 29, 2013 at 12:02 PM, Jason Smith <[email protected]> wrote: > To clarify, "tinfoil hat" mode is actually just a complete > implementation of the RP role, notably that it does not require the > POST to browserid.org/verify to verify an assertion. Thus, CouchDB > could be used on an intranet where an existing IdP exists. The IdP is > out of scope, but I expect to install one to test CouchDB when that > time comes.
This might be useful inspiration: https://bitbucket.org/djc/persona-totp. Cheers, Dirkjan
