3 ms·

http://www.codinghorror.com/blog/archives/001128.html http://www.codinghorror.com/blog/archives/001128.html I wouldn't. edit It's worth noting to answer one

by iamdave 18y ago

http://www.codinghorror.com/blog/archives/001128.html http://www.codinghorror.com/blog/archives/001128.html I wouldn't. edit It's worth noting to answer one of your questions: I don't follow my friends around to every new site that pops up. Primarily because only 10% of my friends are technically savvy enough to the point where I would actually use the word "Twitter" around them. I've found this is becoming increasingly more and more the case, we're establishing connections with like minded people online, and isolating ourselves to a certain extent when it comes to who among our friends knows their two cents about social content. That said, if I create an account on a site "just to test it out", I'll probably use my dummy email account in the first place partially out of habit, and partially to gather any extraneous crap that may get dumped in the inbox anyway.

thamer 18y ago
Exactly, especially since there seems to be a better way: http://code.google.com/apis/contacts/ http://code.google.com/apis/contacts/ I've never tried it, but as I understand it, this is the right (and safe) way to get this information. My guess is that you get an email from Google saying that some application has requested your contact info, along with a link to click in order to allow or forbid it. edit A quick look at the documentation describes two ways of getting informations for a Gmail account, either with login+password or using what they call AuthSub Proxy Identification: http://code.google.com/apis/accounts/docs/AuthForWebApps.html#AuthProcess http://code.google.com/apis/accounts/docs/AuthForWebApps.htm... The application requests access to the account and gets an authentication token, which can be used to get user information once it's been validated either by login/pass or by the user.
- bigbang 18y ago
  Thanks. There are few options 1. Redirecting to Yahoo/Gmail page where the user signs and authorizes Yahoo or Google to give us the user's contact. This gives the user the secure feeling. 2. Same as 1, but instead of redirecting show it in a big frame on same page, so the user feels he has not left the page and can if the user wishes find friends through another webmail account. which do you think is better for you(and normal not so tech savvy users)?
  - IsaacSchlueter 18y ago
    Replace the whole page so that the top-level URL in the address bar says "yahoo" or "google" when they're signing in. Otherwise you're just another phisher. "Normal" users don't care. But they'll learn and eventually expect the conventions that we establish. So let's establish conventions that are valuable.

by iamdave 18y ago

thamer 18y ago

Exactly, especially since there seems to be a better way: http://code.google.com/apis/contacts/ http://code.google.com/apis/contacts/ I've never tried it, but as I understand it, this is the right (and safe) way to get this information. My guess is that you get an email from Google saying that some application has requested your contact info, along with a link to click in order to allow or forbid it. edit A quick look at the documentation describes two ways of getting informations for a Gmail account, either with login+password or using what they call AuthSub Proxy Identification: http://code.google.com/apis/accounts/docs/AuthForWebApps.html#AuthProcess http://code.google.com/apis/accounts/docs/AuthForWebApps.htm... The application requests access to the account and gets an authentication token, which can be used to get user information once it's been validated either by login/pass or by the user.

bigbang 18y ago
Thanks. There are few options 1. Redirecting to Yahoo/Gmail page where the user signs and authorizes Yahoo or Google to give us the user's contact. This gives the user the secure feeling. 2. Same as 1, but instead of redirecting show it in a big frame on same page, so the user feels he has not left the page and can if the user wishes find friends through another webmail account. which do you think is better for you(and normal not so tech savvy users)?
- IsaacSchlueter 18y ago
  Replace the whole page so that the top-level URL in the address bar says "yahoo" or "google" when they're signing in. Otherwise you're just another phisher. "Normal" users don't care. But they'll learn and eventually expect the conventions that we establish. So let's establish conventions that are valuable.