Mashup Security

From MashupCamp

I scheduled this talk for the second session on day 2 - as it stands, it's in room B.

As some background, at last year's Mashup Camp, there was a talk on Identity and Security.

An additional question I've been pondering: mashups create a third entity from the usage of two other entities. Are the security issues of the mashup greater than or equal to the sum of the security issues with the two original entities?

For example, can you concieve of a situation where two secure services actually create a completely insecure mashup?

I'll be blogging some thoughts as the day goes by, as well as posting whatever I come up with here. Please edit as you see fit.