3 ms·

I guess I'm alone here. I'm pretty tired of 30+ login names and passwords. If I use the same one for all, then any single breach hits all 30+ sites. They sho

I guess I'm alone here. I'm pretty tired of 30+ login names and passwords. If I use the same one for all, then any single breach hits all 30+ sites. They should just give it a better name, like Internet-Wide Identity. OpenID is an implementation (centered) name, not a user (centered) name.

kirse 18y ago
It's not too hard to pick a unique username, and for a password, just start with a base password that you memorize and then apply your own "hash" based on the domain you're visiting. Example: Your base password is "fun" and you're visiting Gmail -- if your hash is taking the first and last letters of the domain then your password is "funGl". BAM! Single breach problem solved! Picking a unique username is up to you.
ricree 18y ago
I'm another huge fan of OpenID, but after being the only one arguing for it the last couple of times it came up, I've gotten sick of speaking up for it. Personally, I would love it if almost every site out there would let me log in with an openID. I'm apparently in the minority here, but I'm sick of having to make a new account every time I want to check out some site or forum that looks like it might be interesting. While there are issues in the implementation, I am very much unconvinced that there is anything particularly more difficult about the concept than that of current logins. When I ran non techie friends through it, the biggest complaint was usually that there were too many different screens they had to click through, and there was some confusion about where to go to get an openID, but as far as I can see these are all things that can be improved without sacrificing the core concept of OpenID.
misuba 18y ago
OpenID does solve a problem, and it's even a problem that average-Joe users agree is a problem - once you spend 10 minutes explaining to them just what the hell the field that wants something called an OpenID URL is supposed to do. The name isn't the problem, the expected action is the problem. People expect to enter a password to log into things.
mechanical_fish 18y ago
http://1password.com http://1password.com

kirse 18y ago

It's not too hard to pick a unique username, and for a password, just start with a base password that you memorize and then apply your own "hash" based on the domain you're visiting. Example: Your base password is "fun" and you're visiting Gmail -- if your hash is taking the first and last letters of the domain then your password is "funGl". BAM! Single breach problem solved! Picking a unique username is up to you.

ricree 18y ago

I'm another huge fan of OpenID, but after being the only one arguing for it the last couple of times it came up, I've gotten sick of speaking up for it. Personally, I would love it if almost every site out there would let me log in with an openID. I'm apparently in the minority here, but I'm sick of having to make a new account every time I want to check out some site or forum that looks like it might be interesting. While there are issues in the implementation, I am very much unconvinced that there is anything particularly more difficult about the concept than that of current logins. When I ran non techie friends through it, the biggest complaint was usually that there were too many different screens they had to click through, and there was some confusion about where to go to get an openID, but as far as I can see these are all things that can be improved without sacrificing the core concept of OpenID.

misuba 18y ago

OpenID does solve a problem, and it's even a problem that average-Joe users agree is a problem - once you spend 10 minutes explaining to them just what the hell the field that wants something called an OpenID URL is supposed to do. The name isn't the problem, the expected action is the problem. People expect to enter a password to log into things.

mechanical_fish 18y ago

http://1password.com http://1password.com