4 ms·

Although I agree with Eran, in the interest of balance let me also link to John Panzer (of Google, but writing independently) who tries to address some of Eran'

• papachito 16y ago
  Even Googlers agree with Eran, xauth is just a temporary solution, the real solution should go into the browser, maybe with a API that is xauth compatible. Mozilla is already working on those ideas. edit, from another googler: http://www.google.com/buzz/dclinton/RcW6X3EjKj1/John-Panzers-take-on-the-XAuth-project-is-pretty http://www.google.com/buzz/dclinton/RcW6X3EjKj1/John-Panzers... > John Panzer's take on the XAuth project is pretty much spot-on. It's not that XAuth is what anyone wants for the ultimate answer in this space. > Rather, XAuth is a short-term way of pushing for any momentum in this direction. > There are a number of companies leading it, btw: > MySpace: http://xauthdemo.myspace.com/ http://xauthdemo.myspace.com/ > Microsoft: http://xauthdemo.mslivelabs.com/ http://xauthdemo.mslivelabs.com/ > Yahoo: http://developer.yahoo.net/blog/archives/2010/04/xauth_oauth_and_yahoo_openid.html http://developer.yahoo.net/blog/archives/2010/04/xauth_oauth... > Etc., etc. (Eran suggested this was Google-led, which didn't quite strike me as accurate, given that Yahoo, Microsoft, MySpace, etc., were all as involved as Google was.) > For more background on XAuth, I did a round-up of the various announcements and responses during the XAuth launch:: http://www.google.com/buzz/dclinton/CYgLcs24yqP/ http://www.google.com/buzz/dclinton/CYgLcs24yqP/