Poll: What do you think of OpenID? • Hacker News Board

Re: Poll: What do you think of OpenID?

#51

Post by pyre » Mon, Oct 12, 2009, 5:37 AM UTC

kniwor wrote: post #44

pyre wrote: post #37

Lately I've been thinking that what we really need is something based on PGP/GnuPG. Think about it. If the browser implemented access to your keychain, then you could use your keys as login. When you 'sign up' you would just provide you public key to the website (upload or url). Then when you were presented with a login, the browser would be sent a data set to sign with your private key and send back to the server yo…

This can be easily done using openid. Openid providers are free to authenticate you any which way including exotic means like those. Here's an implementation in private beta: http://pgpopenid.com/

I'd really like to see more details about how they are implementing this, which that page provides none of, unfortunately.

Re: Poll: What do you think of OpenID?

#52

Post by timdorr » Mon, Oct 12, 2009, 7:20 AM UTC

kniwor wrote: post #33

timdorr wrote: post #24

Earlier quoted context omitted.

Well, there should be a breakdown between FB Connect and OpenID. The login flow between those two implementations is drastically different.

In fact, FB connect is pretty much the antithesis of openid. Openid is open, federated and gives user control. FB connect is closed, centralized and basically allows FB to play big brother.

Actually, Facebook is very prolific in the Open Source world. They're one of the best citizens I've seen: http://developers.facebook.com/opensource.php

In fact, a ton of the code that runs the site itself is fully open source: http://developers.facebook.com/fbopen/ That's mind-blowingly impressive. I still don't believe more people don't know about this or seem to care.

Re: Poll: What do you think of OpenID?

#53

Post by kniwor » Mon, Oct 12, 2009, 9:58 AM UTC

pyre wrote: post #51

kniwor wrote: post #44

Earlier quoted context omitted.

This can be easily done using openid. Openid providers are free to authenticate you any which way including exotic means like those. Here's an implementation in private beta: http://pgpopenid.com/

I'd really like to see more details about how they are implementing this, which that page provides none of, unfortunately.

Yea... That page is next to useless. Had heard of them a while ago and thought they would have more write up then that on their home page.

Anyway, this is very simple to do. You first create a server that can authenticate you just for itself over the web. You send it your id, it sends a random string. You sign it and send it a random string of your own. Server signs your random string and sends it back. You both know you are authentic, server leaves a signed cookie at your end. Now this server can act as an openid server too. You give random web-app your openid residing on this server... random web app asks this server. It confirms or denies and life is good.

Re: Poll: What do you think of OpenID?

#54

Post by kniwor » Mon, Oct 12, 2009, 10:10 AM UTC

timdorr wrote: post #52

kniwor wrote: post #33

Earlier quoted context omitted.

In fact, FB connect is pretty much the antithesis of openid. Openid is open, federated and gives user control. FB connect is closed, centralized and basically allows FB to play big brother.

Actually, Facebook is very prolific in the Open Source world. They're one of the best citizens I've seen: http://developers.facebook.com/opensource.php In fact, a ton of the code that runs the site itself is fully open source: http://developers.facebook.com/fbopen/ That's mind-blowingly impressive. I still don't believe more people don't know about this or seem to care.

Oh I know and use a lot of their open source software but what has that got to do with fb connect?

"FB connect" is a session management and authentication product from facebook. I find it obnoxious. It is pretty much literally the antithesis of openid. FB open source: good, FB connect: horrible.

Re: Poll: What do you think of OpenID?

#55

Post by bkissel » Tue, Oct 13, 2009, 4:22 PM UTC

Your readers might want to think about accepting registrations and logins from Yahoo, Google, Twitter, Facebook, MySpace, AOL, Hotmail, Windows LiveID and many other accounts using JanRain's RPX, http://rpxnow.com

Additionally, users can publish their activities on a website back to social networks including Yahoo, Facebook, Twitter, and MySpace which increases referral traffic to your sites and facilitates subsequent logins.

Clients include Sears, Kmart, Universal Music Group, EMI, Fox News, KickApps, UserVoice, Viewpoints, Get Satisfaction, Savings.com, FamilyLink, DC Shoes, Famous Footwear, and many others