3 ms·

As I see it, it has been replaced by OAuth, which is created for a different purpose but works just as well for login and authentication.

JepZ 9y ago
I doubt that. Its just that everyone wanted to use those fancy facebook/google/whatever logins and nobody really cared for the decentralized login concept. In fact, the few websites which supported OpenID allowed to use custom providers while OAuth mostly limited to handful of social media providers. So OpenID was a way to decentralize the web and prevent password reuse while OAuth is a strategy by large Social Media corporations to increase your dependence on their brand. In the end they both might be able to authenticate and to prevent password reusage to some extend, but their motivations and implications are very different.
willow9886 9y ago
No, OpenID has been replaced by OpenID Connect, a profile of OAuth 2.0 written to specifically address user sign in. OAuth 2.0 is an authorization framework, not an authentication protocol. OAuth 2.0 can be used for a lot of cool tasks, one of which is person authentication. OpenID Connect is a “profile” of OAuth 2.0 specifically designed for attribute release and authentication. For more info, see our blog: OAuth vs SAML vs OpenID Connect. [1] [1] https://www.gluu.org/resources/documents/articles/oauth-vs-saml-vs-openid-connect/ https://www.gluu.org/resources/documents/articles/oauth-vs-s...
- snuxoll 9y ago
  OpenID Connect is still not in any way comparable with traditional OpenID.
  - willow9886 9y ago
    Nobody said it was... > OpenID has been replaced by OpenID Connect Replaced != compatible. Also, "traditional OpenID" is very ambiguous phrasing... are you referring to OpenID 1? OpenID 2? or OpenID Connect?
    - tedunangst 9y ago
      While we're playing inequality, comparable != compatible.
      - willow9886 9y ago
        oops! i've been staring at the screen too long!!

JepZ 9y ago

I doubt that. Its just that everyone wanted to use those fancy facebook/google/whatever logins and nobody really cared for the decentralized login concept. In fact, the few websites which supported OpenID allowed to use custom providers while OAuth mostly limited to handful of social media providers. So OpenID was a way to decentralize the web and prevent password reuse while OAuth is a strategy by large Social Media corporations to increase your dependence on their brand. In the end they both might be able to authenticate and to prevent password reusage to some extend, but their motivations and implications are very different.

willow9886 9y ago

No, OpenID has been replaced by OpenID Connect, a profile of OAuth 2.0 written to specifically address user sign in. OAuth 2.0 is an authorization framework, not an authentication protocol. OAuth 2.0 can be used for a lot of cool tasks, one of which is person authentication. OpenID Connect is a “profile” of OAuth 2.0 specifically designed for attribute release and authentication. For more info, see our blog: OAuth vs SAML vs OpenID Connect. [1] [1] https://www.gluu.org/resources/documents/articles/oauth-vs-saml-vs-openid-connect/ https://www.gluu.org/resources/documents/articles/oauth-vs-s...

snuxoll 9y ago
OpenID Connect is still not in any way comparable with traditional OpenID.
- willow9886 9y ago
  Nobody said it was... > OpenID has been replaced by OpenID Connect Replaced != compatible. Also, "traditional OpenID" is very ambiguous phrasing... are you referring to OpenID 1? OpenID 2? or OpenID Connect?
  - tedunangst 9y ago
    While we're playing inequality, comparable != compatible.
    - willow9886 9y ago
      oops! i've been staring at the screen too long!!