Since OpenID is coming up a lot in this thread, I've been meaning to set up my own personal OpenID provider on my colo
box for a couple of years now, but every time I look around for a free
software implementation that supports SSL client certificate
authentication, I'm stymied. Does anyone know of one?
Start ups, please don't force me to log in with Facebook
181–190 of 279 posts
Re: Start ups, please don't force me to log in with Facebook
#182I don't use Facebook. Incidentally, I adblocked "facebook.com" the other day, and a lot of sites load much faster now. In three days, the rule has been hit over 1300 times! If I had a Facebook account, this would scare me.
I use Facebook, so blocking it won't work for me. But I don't want other sites to be able to "cross-domain" Facebook, since that gives Facebook more information that I'd like. A way to block only "cross-domain" type Facebook access would be nice. Or perhaps a per-tab private browsing mode.
You can block *.facebook.com in adblock plus. Then you can allow ads on facebook.com.
So on facebook, you won't be blocking Facebook.com. But on other sites, facebook would be blocked.
Re: Start ups, please don't force me to log in with Facebook
#183I'm sorry, but its just not worth expending the extra effort to get you signed up to my service. I can get millions of people before it even starts becoming an issue.
I feel that's a flawed attitude. It's like reverse entitlement. Were I a startup founder, I would make it my goal to ensure that EVERY. single. potential customer can use my site, within my capabilities. (edit: I don't know why you're getting downvoted; you stated your philosophy as part of the discussion, which I don't think is a good reason to get downvoted.)
[deleted]
Re: Start ups, please don't force me to log in with Facebook
#184Earlier quoted context omitted.
I won't implement OpenID for any site where I have a say. It needs to die so that something good can step into its place. If you have a site that requires OpenID, I won't use it for the same reason I won't use your site that requires Facebook. If you're going to implement it, make sure you also implement a standard user/pass registration or you'll lose a lot potential users (as in most of them).
What Problem do you have with OpenIDv2a + OAuth?
So I start a SaaS business and put "Please login with your OpenIDv2a+OAuth compatible login below." prominently on my front page.
And then I have no users because nobody knows what that means.
Re: Start ups, please don't force me to log in with Facebook
#185When I try to log on via Connect on Groupon, sometimes it doesn't work or is slow to log me in :P
Re: Start ups, please don't force me to log in with Facebook
#186Earlier quoted context omitted.
It became significantly easier when Google (and Yahoo!, and MySpace) became OpenID providers. If you do something like StackOverflow does (click the Google icon to login with Google), then it's pretty low-effort to use.
Ah, that's true. It's a bit odd to use a dedicated icon to log in to something that is exactly the same as the more general option you offer, but the average user won't know that, so it makes sense. Do you know the endpoint for Google? I didn't know they supported it natively.
Re: Start ups, please don't force me to log in with Facebook
#187Earlier quoted context omitted.
>FB Connect actually does a pretty good job at being "easy to use". Just log into your FB account and you are set. The only time I used OpenID, it was for StackOverflow. The workflow was exactly as you describe for Facebook Connect, except substituting Gmail for Facebook. I really don't see where there's room to be tripped up, unless you can't handle the idea that you can log in using accounts from multiple places.
Because normal users' innate pathological copy-reading avoidance make the login page ( http://skitch.com/dasil003/d2ac8/change-openid-stack-overflo... ) a usability clusterfuck.
That's not an issue with OpenID. That's an issue with the decision to not use OpenID exclusively and applies to every authentication service on the list in that screenshot, by virtue of that list being a list.
Re: Start ups, please don't force me to log in with Facebook
#188Earlier quoted context omitted.
Why would you trust a website asking for an email and password more?
Email is better because you are not locked into using some third party website to log in. You can set up an email server of you own if you wanted to.
Sure - but that wasn't what he said. He said that requiring facebook makes him think that the website owner shouldn't be trusted with data.
Which has nothing to do w/ lock-in on 3rd party websites. It has to do w/ the relative security competence of those who choose to use FB Connect vs. those who choose email.
Re: Start ups, please don't force me to log in with Facebook
#189Earlier quoted context omitted.
Ah, that's true. It's a bit odd to use a dedicated icon to log in to something that is exactly the same as the more general option you offer, but the average user won't know that, so it makes sense. Do you know the endpoint for Google? I didn't know they supported it natively.
https://www.google.com/accounts/o8/id
Thank you.
Re: Start ups, please don't force me to log in with Facebook
#190I just came off of a project where we built the entire auth system on facebook. No other regi options - just facebook. I will never do that again. If that was to become the standard, facebook shot themselves in the foot with their crappy APIs anyhow (see http://news.ycombinator.com/item?id=1731427 ) And I have a facebook account, and I'm really hesitiant to like or authorize anything for fear of the author (or hacker…
I'm really hesitiant to like or authorize anything for fear of the author (or hacker) using it for malicious purposes I'm not quite as fearful for myself. However, if your application requests access to my friends list, you've just struck out with me. Even if I'm inclined to trust you, I don't believe that I have the right to make that decision for my friends. I won't expose them to you, so you can't have my business…
I agree. I recently wanted to comment on something on codinghorror.com and had to use the OpenId/Facebook login. It wanted to be able to use my FB credentials to login - fine. But then it also wanted access to my friends and activities and to be able to post things on my wall. WTF?
I denied that second query and was able to log in fine, but the question is, why the hell did they ask in the first place. Seemed underhanded to me (most people would have been confused and probably said, "Yeah, I want to log in, I guess so, sure").