5 ms·

I do like their last point that the system is designed to be integrated directly into the browser. That avoids the issue of OpenID requiring that a popup be di

• wmf 15y ago
  If you have browser support, the browser could log you in to your OpenID provider so there'd be no popup.
  • simcop2387 15y ago
    The problem is that OpenID doesn't specify that part of it. I could have one that needs a key-fob token to authenticate there.
    • pornel 15y ago
      You can authenticate any way you want, so that's not a problem. If NAT and firewalls weren't such PITA, browser could even act as an OpenID provider for itself (e.g. Opera Unite makes it possible). The problem with OpenID is lack of discovery. AFAIK there is no way to advertise that website supports OpenID login and where it should be submitted, so browsers are unable to have integrated UI for it.
      • mbreese 15y ago
        Since it isn't specified as part of the spec, browsers would potentially have a different implementation for each OpenID provider, so yeah, that's a problem.
        • pornel 15y ago
          Client<>Provider authentication method is not visible in the in OpenID protocol between Provider<>Consumer. Can you elaborate where the problem lies? Why would different auth methods in browsers cause problems, when different provider's methods don't? AFAIK client auth method is invisible and irrelevant, especially in the case where client and provider are the same thing (the browser). In fact, in-browser OpenID (where browser is the provider) could skip client authentication completely and just say "yes" to every consumer (because browser knows and trusts its own identity).
    • wmf 15y ago
      Realistically everyone is going to become compatible with whatever the browsers support.