[OpenID] Developer Preview: Identity in the browser - IDIB ...

[André Luís]

Hello everyone,

It's a great idea, but IMHO it seems to tackle the problem from the
wrong end. This might be due to the fact that I've been using
Verisign's SeatBelt for firefox and am quite pleased with the user
experience, thus I might be biased.

They require support on the provider side, instead of the RP. This
makes sense as the point is to have far more RPs than Providers in the
ecosystem, right? And the more complex step is setting up
authentication accounts, not inserting the URL in the form box.
However, the more the merrier --and the opensourceness of the project
makes it very attractive. I do think IDIB could benefit if it added to
its roadmap the support of SeatBelt's config files, as they are
already deployed on several providers. (example:
https://www.myopenid.com/verisign_plugin_config
https://myvidoop.com/seatbelt_config). Has this been discussed yet?

(Disclaimer: I've contributed to the SeatBelt project with a
Portuguese translation.)

Keep up the good work. And I'm joining the discussion group after sending this.

Cheers,
André Luís

On Thu, Aug 7, 2008 at 8:31 PM, George Fletcher <gffletch at aol.com> wrote:
> Just to make sure I understand...
>
> Along with the XRDS types defined on the wiki, does the RP just have to
> return the X-XRDS-Location header to point to the XRDS file?  If so, is the
> RP expected to return the X-XRDS-Location header even if an explicit XRDS
> query had not been made?
>
> The reason I ask, is that I can see a mode for this plugin that is proactive
> (e.g. the "New User" experience). This mode would do more than just add a
> subtle tool bar but instead would open a dialog window that says... "BTW,
> you have an identity that will allow you to log into this site. Do you want
> to continue?" (proper UI wording of course).
>
> One of the biggest hurdles I see is not that people who know about OpenID
> want an easier way to login... but rather that we want people who don't even
> know they have an OpenID to be informed of that fact and the benefits it
> provides.
>
> Thanks,
> George
>
> Scott Kveton wrote:
>
> The Identity in the Browser (IDIB for short) project has launched over
> on Google Code today:
>
> http://idib.googlecode.com
>
> The goal of this project is to produce an open source extension to
> Firefox that helps with usability problems and addresses several
> security vulnerabilities around OpenID.  Ideally this is the start of
> making sense of what identity in the browser would look like.  In the
> future, this could be the basis for integrated support in all modern
> browsers if the project goes well.
>
> A couple of key points:
>
> * This is still very rough and not meant for general users yet
>
> * The work may lead to extensions to the OpenID protocol that may take
> shape in the form of specifications - more information can be found on
> the project page wiki:
>
> http://code.google.com/p/idib/w/list
>
> * The discussion about IDIB is happening on the mailing list here:
>
> http://groups.google.com/group/idib
>
> Hope to see you there!
>
> - Scott
> _______________________________________________
> general mailing list
> general at openid.net
> http://openid.net/mailman/listinfo/general
>
>
>
> --
> Chief Architect                   AIM:  gffletch
> Identity Services                 Work: george.fletcher at corp.aol.com
> AOL LLC                           Home: gffletch at aol.com
> Mobile: +1-703-462-3494
> Office: +1-703-265-2544           Blog: http://practicalid.blogspot.com
>
> _______________________________________________
> general mailing list
> general at openid.net
> http://openid.net/mailman/listinfo/general
>
>