[OpenID] popup protocol UX? Re: FB Connect, OpenID and UX

[Luke Shepard]

> It's nice that the real Connect API opens a popup with the Location bar
> intact so the user gets some hints as to the legitimacy of the popup asking
> for their credentials. Has Facebook done any usability testing to see how
> users would react to [various suggestions]

We have done a lot of testing in this area, although we haven't publicly shared any of it at this point. We are actively researching phishing prevention.

>From Allen Tom:
> The Connect popup could be improved a bit by using HTTPS, and perhaps setting the hostname to something a bit shorter and more recognizable, like  https://login.facebook.com

Those are both great suggestions.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20081215/81639ba3/attachment-0001.htm>