We're turning off Clickpass March 15. How to keep your HN account.
51–60 of 68 posts
Re: We're turning off Clickpass March 15. How to keep your HN account.
#52Thanks. Big win for user security on the Internet.
Re: We're turning off Clickpass March 15. How to keep your HN account.
#53The fact that Clickpass even exists made me realize openID was DOA. I spent a day implementing openID for the users of my website, because I realized, hey, what a cool idea, a URL can represent a single user on the internet, and that user can authenticate against it universally. The sad truth was that I could not expect a single one of my users to even understand what the hell was going on, because for most test open…
I always thought that the problem with openID is they didn't use email addresses instead of URLs. e.g. use john@example.com and require a certain url template for the endpoint e.g. example.com/openid/john That way I don't have to remember another identifier and we already trust at least part of our identity to our email provider. Not perhaps as open, but much more approachable as a user.
Re: We're turning off Clickpass March 15. How to keep your HN account.
#54I wrote the HN code in about 2 days and I was learning lisp/arc so it was awful code (RTM did the openID part) and literally no one has touched Clickpass code for 2.5 years. The fact that it still works is always surprising to me :).
Also I think Oauth beat OpenID hands down.
Re: We're turning off Clickpass March 15. How to keep your HN account.
#55Earlier quoted context omitted.
Yes! Please please please implement BrowserId. This is the one authentication/login system that actually has a real fighting chance. We've implemented it for our site (next to FB login) and we are really happy with it.
Could you explain why? When I last looked, a crucial component wasn't specced, meaning you had to rely on Mozilla for part of the handshake. Have things change?
The browser integration will be amazing when its ready, but until then, it is the closest thing to FB auth without requiring FB or people to give up their friends list or other information they are concerned about.
I'm not sure what 'crucial component' you are talking about, but we are just using browserid.org.
Re: We're turning off Clickpass March 15. How to keep your HN account.
#56I am one of the co-founders of Clickpass and I think this is a great move. I wrote the HN code in about 2 days and I was learning lisp/arc so it was awful code (RTM did the openID part) and literally no one has touched Clickpass code for 2.5 years. The fact that it still works is always surprising to me :). Also I think Oauth beat OpenID hands down.
And yes, OAuth did beat OpenID, but they're not really the same kind of thing.
Re: We're turning off Clickpass March 15. How to keep your HN account.
#57Are there any plans for BrowserID auth, perhaps?
Yes! Please please please implement BrowserId. This is the one authentication/login system that actually has a real fighting chance. We've implemented it for our site (next to FB login) and we are really happy with it.
I'm looking at implementing this for a new site...
Re: We're turning off Clickpass March 15. How to keep your HN account.
#58I am one of the co-founders of Clickpass and I think this is a great move. I wrote the HN code in about 2 days and I was learning lisp/arc so it was awful code (RTM did the openID part) and literally no one has touched Clickpass code for 2.5 years. The fact that it still works is always surprising to me :). Also I think Oauth beat OpenID hands down.
Did you mean "no one has touched the code in 2.5 years?" If so, then that is indeed, surprising. And yes, OAuth did beat OpenID, but they're not really the same kind of thing.
--- corrected years
Re: We're turning off Clickpass March 15. How to keep your HN account.
#59Re: We're turning off Clickpass March 15. How to keep your HN account.
#60Earlier quoted context omitted.
I always thought that the problem with openID is they didn't use email addresses instead of URLs. e.g. use john@example.com and require a certain url template for the endpoint e.g. example.com/openid/john That way I don't have to remember another identifier and we already trust at least part of our identity to our email provider. Not perhaps as open, but much more approachable as a user.
Hate that idea. I don't want to have to share my email address, in fact that's a primary reason why I always use my open ID (which is unrelated) when possible. Providing email as a credential creates an implicit, if not explicit, invitation "Here, spam me." This is why I'm generally against using email as an identifier. Other examples that all suck for this reason: Apple IDs. Windows Live ID. Jabber.