[OpenID] OpenID and our ideals
SitG Admin
sysadmin at shadowsinthegarden.com
Sat Apr 5 18:31:41 UTC 2008
(Was "Re: OpenID and the COPPA".)
>If the movement gets critical mass beyond the social networking
>space, one can see a world in which such firms, in order to build
>market share or get to market fast in the new market of
>authenticated comments and endorsement systems, will purchase
>those privately-held OPs that (a) somehow get critical mass of
>participation and consumer acceptance,
I must admit that I'm somewhat disturbed by the idea of companies
simply walking up and blithely purchasing a *privately*-held OP. Of
course I assume you mean OP's that provide for more than one user;
*my* Provider is privately-held, and I'm not about to sell my
identity to anyone, no matter how much money they throw at me. What
disturbs me is how, in envisioning such an event occurring several
times over many years, it bears a striking resemblance to several
specks of mercury rolling around in a moving container until they
combine into a single large blob. As of right now, my OpenID is (I
assume; haven't tested it extensively) accepted by consumers all over
the place. What happens to that - and, by extension, to all the other
individuals (and *small* mercury blobs) - running their own OP's?
Will the consumers be able to institute a new requirement that the
"stragglers" give up on their old OP's, which are "losers, in the
competitive world", and join one of the major OP's?
At that point, I think it would be feasible - having gotten the users
hooked on using their OpenID to access the Consumer's services, a new
change suddenly forces a large number of users to choose between an
ideal they might not fully understand (that of decentralization, to
avoid lock-in) which would require them to find a new (possibly with
less security and/or other features) OP as well as endure a
*hopefully* temporary inconvenience while demonstrating their
commitment to that ideal to any Consumer involved in the change; and,
continuing to use their existing OP, while perhaps exhorting any
laggards they know to move on, and get with the program!
A backlash against company decisions is more effectual when a large
number of their customers are involved. I think the important issue
here is ideals:
For the large-scale Consumers, what is there about OpenID that would
be worth more than the opportunity to own their OP's and lock-out the
independents?
For the people developing OP's that serve multiple users, is the
entire endeavor ultimately rooted in the hope to eventually attract
attention from some rich buyer, or is there a reason to say "No."
when money comes knocking?
For the end-users, is there an understanding of the promise that
OpenID has, beyond mere "comment authentication" (to quote Peter
Williams) or "single-sign-on"?
This last may be something for the OpenID Foundation to look into -
when users visit openid.net, to see what it's all about, is equal
weight given to all its advantages over the existing models? Are
there any that could be emphasized more, so they aren't forgotten as
users rush to embrace the bright new future?
-Shade
Postscript: If it *did* happen, I wouldn't be too concerned - all it
would take is one idealistic (and still privately-held) OP to
open-source their features and security measures, for a bunch of
idealistic (but not that skilled) individuals to follow, and suddenly
the users have a number of alternatives to choose from, easing the
challenge of choosing "ideals" over "convenience".
More information about the general
mailing list