2 ms·

After the horrible mess that is OAuth, is anyone really expected to give this a second look?

by dsl 14y ago

drivebyacct2 14y ago
And with no documentation? And frankly a nothing description of what it does or how it works even at a high level. edit: sigh, I put my mouth before my brain sometimes. I guess I accidentally criticized someone working in the open rather than an announcement of an undocumented web protocol.
- swampthing 14y ago
  To be fair, I just came across this and thought it would interest some HN readers. I don't know that the author's made any claim that it's ready for mass consumption.
  - elif 14y ago
    During his talk yesterday at KRT conf he said he is releasing it into the wild early so that it can be truly opensource, with discussion over pull requests and code instead of 'prose' over specs. So ya, i would say it's a good time to show HN.
jklio 14y ago
Well Hammer-Lahav calls it "the biggest professional disappointment of my career" on his blog[1] so I guess he's aware of that aspect (more[2]). The Mozilla Foundation's Persona[3] looks to be further along in terms of code and in terms of other people using it[4], differences with OpenID are partially described here[5]. Regardless of quality I think someone flying solo is going to have a hard time getting ahead of Persona at this point. [1] http://hueniverse.com/2012/07/oauth-2-0-and-the-road-to-hell/ http://hueniverse.com/2012/07/oauth-2-0-and-the-road-to-hell... [2] http://hueniverse.com/2012/07/on-leaving-oauth/ http://hueniverse.com/2012/07/on-leaving-oauth/ [3] http://identity.mozilla.com/post/32395255498/announcing-the-first-beta-release-of-persona http://identity.mozilla.com/post/32395255498/announcing-the-... [4] http://identity.mozilla.com/post/31008721633/application-and-platform-integration-of-persona http://identity.mozilla.com/post/31008721633/application-and... [5] http://identity.mozilla.com/post/7669886219/how-browserid-differs-from-openid http://identity.mozilla.com/post/7669886219/how-browserid-di...
SideburnsOfDoom 14y ago
Yes. Because OAuth takes aim at an important problem area, so having a better go at it is important.
- yarrel 14y ago
  The barn OAuth aimed at is entirely unscratched.

After the horrible mess that is OAuth, is anyone really expected to give this a second look?

by dsl 14y ago

After the horrible mess that is OAuth, is anyone really expected to give this a second look?

And with no documentation? And frankly a nothing description of what it does or how it works even at a high level. edit: sigh, I put my mouth before my brain sometimes. I guess I accidentally criticized someone working in the open rather than an announcement of an undocumented web protocol.

swampthing 14y ago
To be fair, I just came across this and thought it would interest some HN readers. I don't know that the author's made any claim that it's ready for mass consumption.
- elif 14y ago
  During his talk yesterday at KRT conf he said he is releasing it into the wild early so that it can be truly opensource, with discussion over pull requests and code instead of 'prose' over specs. So ya, i would say it's a good time to show HN.

jklio 14y ago

Well Hammer-Lahav calls it "the biggest professional disappointment of my career" on his blog[1] so I guess he's aware of that aspect (more[2]). The Mozilla Foundation's Persona[3] looks to be further along in terms of code and in terms of other people using it[4], differences with OpenID are partially described here[5]. Regardless of quality I think someone flying solo is going to have a hard time getting ahead of Persona at this point. [1] http://hueniverse.com/2012/07/oauth-2-0-and-the-road-to-hell/ http://hueniverse.com/2012/07/oauth-2-0-and-the-road-to-hell... [2] http://hueniverse.com/2012/07/on-leaving-oauth/ http://hueniverse.com/2012/07/on-leaving-oauth/ [3] http://identity.mozilla.com/post/32395255498/announcing-the-first-beta-release-of-persona http://identity.mozilla.com/post/32395255498/announcing-the-... [4] http://identity.mozilla.com/post/31008721633/application-and-platform-integration-of-persona http://identity.mozilla.com/post/31008721633/application-and... [5] http://identity.mozilla.com/post/7669886219/how-browserid-differs-from-openid http://identity.mozilla.com/post/7669886219/how-browserid-di...

SideburnsOfDoom 14y ago

Yes. Because OAuth takes aim at an important problem area, so having a better go at it is important.

yarrel 14y ago
The barn OAuth aimed at is entirely unscratched.