Is it safe to publish my OpenID?

Question

I currently have one OpenID that I use from a provider, it's something like:

http://www.example.com/miffthefox/

However, I want to be able to type the address of my personal website instead of the OpenID, yet still be able to use example.com as the OpenID provider. It seems I can do this via OpenID delegation, by adding the right meta tags to my personal home page, I can redirect it to my OpenID provider.

However, since my personal home page is public, I'm worried about other users visiting my site and grabbing my OpenID. Is this something I should be worried about?

Answer 1

Just ensure your OpenID has a secure password. It's as secure as anything else over https that's password protected.

Answer 2

Someone looking at the code of your site could then figure out that MiffTheFox uses that OpenID server. So what? You tell every web site you log into that anyway. The actual OpenID verification, as John T. says, is protected by SSL.