4 ms·

Are you sure you want OpenID to get more exposure? It already failed once due to hideously poor execution and terrible usability problems. Attaching oauth doesn

by dcurtis 17y ago

Are you sure you want OpenID to get more exposure? It already failed once due to hideously poor execution and terrible usability problems. Attaching oauth doesn't seem to solve any of the big problems. It just masks them behind a protocol that works decently on it's own. The OpenID promise sounds good in a geeky, technical sense, but judging from their past work, I do not trust the OpenID group to build anything remotely viable.

jmillikin 17y ago
OpenID hasn't failed at all -- I've been noticing more and more sites allowing sign-ins using it, and even a few (primarily for tech audiences) which are OpenID-only. Of course, there are a few sites which claim OpenID support but implement it poorly (such as news.yc), but that's not a reflection on the protocol.
- dcurtis 17y ago
  I do not consider getting a tiny subset of the tech audience using OpenID a case for it being a success. In fact, it did that years ago and has gone nowhere since.
  - jmillikin 17y ago
    OpenID 2, which was the first version intended to be broadly useful outside of LiveJournal, was published less than two years ago. In that time, OpenID has gained support from every major identity provider and most major consumers. Anybody who uses LiveJournal, Wordpress, StackOverflow, or thousands of other sites can use OpenID instead of a traditional login.
    - Andys 17y ago
      Reality check: "most" major consumers is going too far
    - codemechanic 17y ago
      http://www.codelathe.com/blog/index.php/2009/08/25/announcing-tonido-openid-truly-decentralized-identity-management/ http://www.codelathe.com/blog/index.php/2009/08/25/announcin.... Check out Tonido OpenID. It is a truly a decentralized, private OpenID provider.
  - StrawberryFrog 17y ago
    You're making a case that OpenId hasn't succeeded yet. that's not the same as making a case that it has failed. Of course, success is subjective and relative. I see a little success every time I log in to stackOverflow via OpenId, or get a OpenId guest comment on LiveJournal.
mscarborough 17y ago
Yes, I would like OpenID to get more exposure. Not just because I spent time implementing it for our site the first time around--they addressed the execution and usability problems with this new work, and I think it will be much more useful for non-technical users. The OpenID Foundation folks did not just bolt OAuth onto the side and call it a day. One of the key new features is a protocol that allows the ability to stay on-site within a popup or other login, rather than being redirected to a third party, then back to your intended site. I have not read the code yet to see exactly how it's different, but it seems to strengthen the attribute exchange as well for profile-type information. Most of the OpenID providers I've used are wildly divergent in how (and how many) attributes are exchangeable with the OpenID consuming site. Do you not see these as fruitful improvements to the protocol?

by dcurtis 17y ago

jmillikin 17y ago

OpenID hasn't failed at all -- I've been noticing more and more sites allowing sign-ins using it, and even a few (primarily for tech audiences) which are OpenID-only. Of course, there are a few sites which claim OpenID support but implement it poorly (such as news.yc), but that's not a reflection on the protocol.

dcurtis 17y ago
I do not consider getting a tiny subset of the tech audience using OpenID a case for it being a success. In fact, it did that years ago and has gone nowhere since.
- jmillikin 17y ago
  OpenID 2, which was the first version intended to be broadly useful outside of LiveJournal, was published less than two years ago. In that time, OpenID has gained support from every major identity provider and most major consumers. Anybody who uses LiveJournal, Wordpress, StackOverflow, or thousands of other sites can use OpenID instead of a traditional login.
  - Andys 17y ago
    Reality check: "most" major consumers is going too far
  - codemechanic 17y ago
    http://www.codelathe.com/blog/index.php/2009/08/25/announcing-tonido-openid-truly-decentralized-identity-management/ http://www.codelathe.com/blog/index.php/2009/08/25/announcin.... Check out Tonido OpenID. It is a truly a decentralized, private OpenID provider.
- StrawberryFrog 17y ago
  You're making a case that OpenId hasn't succeeded yet. that's not the same as making a case that it has failed. Of course, success is subjective and relative. I see a little success every time I log in to stackOverflow via OpenId, or get a OpenId guest comment on LiveJournal.

mscarborough 17y ago

Yes, I would like OpenID to get more exposure. Not just because I spent time implementing it for our site the first time around--they addressed the execution and usability problems with this new work, and I think it will be much more useful for non-technical users. The OpenID Foundation folks did not just bolt OAuth onto the side and call it a day. One of the key new features is a protocol that allows the ability to stay on-site within a popup or other login, rather than being redirected to a third party, then back to your intended site. I have not read the code yet to see exactly how it's different, but it seems to strengthen the attribute exchange as well for profile-type information. Most of the OpenID providers I've used are wildly divergent in how (and how many) attributes are exchangeable with the OpenID consuming site. Do you not see these as fruitful improvements to the protocol?