No subject

Fri Aug 15 23:49:43 UTC 2008

> The Connect popup could be improved a bit by using HTTPS, and perhaps set=
ting the hostname to something a bit shorter and more recognizable, like  h=
ttps://login.facebook.com

Those are both great suggestions.

--_000_C56C0C6022613lshepardfacebookcom_
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<HTML>
<HEAD>
<TITLE>Re: popup protocol UX? Re: [OpenID] FB Connect, OpenID and UX</TITLE=
>
</HEAD>
<BODY>
<BLOCKQUOTE><FONT FACE=3D"Calibri, Verdana, Helvetica, Arial"><SPAN STYLE=
=3D'font-size:11pt'>&gt; It's nice that the real Connect API opens a popup =
with the Location bar<BR>
&gt; intact so the user gets some hints as to the legitimacy of the popup a=
sking<BR>
&gt; for their credentials. Has Facebook done any usability testing to see =
how<BR>
&gt; users would react to [various suggestions]<BR>
<BR>
We have done a lot of testing in this area, although we haven&#8217;t publi=
cly shared any of it at this point. We are actively researching phishing pr=
evention. <BR>
<BR>