[OpenID] Identity in the browser - IDIB
SitG Admin
sysadmin at shadowsinthegarden.com
Fri Aug 8 21:54:38 UTC 2008
>Having the extension detect that the site I am on could be an OP
>would be more interesting.
It could also be more confusing, with the large and growing number of
sites acting as OP's; they go to one site, get a notification that
they can use it as their OP, say "okay", maybe set things up; next
site, they get the same offer, and so on :(
>The user not needing to know their identifier(s) can dramaticly
>simply the user experience
It can also endanger their privacy. If the user isn't aware that
they're posting, say, the URI to their photo collection (if that's
the OP they settled on using when the extension installed and began
detecting their possible OP's), they may go ahead and begin using it
everywhere. Or, if their E-mail address (real first/last name?) maps
to a default URI of the same (first/last name), they've suddenly
given away a lot more than they may have been aware was even possible.
Using first/last name in E-mail addresses makes sense because you
"know" who you're getting in contact with, and/or can easily remember
the address knowing the name. I think it's important for users to
have a better grasp of the concept of identity, and be able to
recognize first/last name as an optional quality thereof, not an
essential component in the determination thereof.
It would also be nice for sites newly becoming OP's to explicitly
warn users that using the associated URI will make certain
information available to anyone visiting the sites they use OpenID
at. If the user goes straight to trying to use their new OP (without
having to enable it or anything), the site should give them this
warning the first time. The user could visit their URI anonymously
(not logged in) to begin exploring and see for themselves what was
visible, but since the site (presumably) already has access to its
own settings for what information is private and what isn't, it
doesn't seem like it would be difficult for the site to conveniently
remind the user.
-Shade
More information about the general
mailing list