3 ms·
Although I think you're right, I can't understand why they didn't try to "fix" OpenID and started a new thing instead. http://xkcd.com/927/ http://xkcd.com/927
by reidrac 14y ago
Although I think you're right, I can't understand why they didn't try to "fix" OpenID and started a new thing instead.
http://xkcd.com/927/ http://xkcd.com/927/
That said, I'd love they succeed and we have finally something that works well and it's not under company-X's control.
- fmarier 14y agoOne of the reasons why we couldn't just "fix" OpenID is that we wanted a scheme that would be privacy-sensitive. With OpenID, the result of the site redirecting you to the IdP (and then the IdP redirecting you back to the site) is that the IdP can get a trail of every website you're trying to log into. That's pretty fundamental to the way OpenID is designed.