[OpenID] An OpenID "mobile" Hint?

[Nat Sakimura]

Browser version is good.

For many WAP phones and its variations, there is an associated
identifier for each phone that identifies the hardware. When possible,
it would be worthwile to use those as a part of credentials. At least,
that is the standard practice in Japan, so that users do not have to
type in the password at all, and that is how the m-commerce got so
popular in Japan.

=nat

On Thu, Jun 5, 2008 at 1:50 PM, Johannes Ernst
<jernst+openid.net at netmesh.us> wrote:
> Great idea.
>
> The implementation would be a bit tricky, though. What are we talking
> about here?
> iPhone (easy -- comparatively)
> other smartphone (doable, but each might be different)
> WAP (hmmm...)
>
> There are so many variations in the mobile world that enumerating a
> set of device categories is hard.
>
> Perhaps the XRDS file could simply contain the browser version string,
> which means the RP would have to do very little work: if entry matches
> browser version, use that OpenID provider. Otherwise: all bets are
> off, like right now.
>
>
>
> On 2008/06/04, at 14:08, David Recordon wrote:
>
>> In developing a mobile application that uses OpenID for logins one of
>> the things I've become really cognizant of is how poor of the mobile
>> experience most Providers have when it comes to OpenID.  It obviously
>> doesn't take a lot to create a streamlined Provider flow for
>> authentication and the trust request, but so far it seems that no one
>> has really done that.  I was also thinking more about Providers such
>> as YubiKey where authenticating with a USB device (despite how awesome
>> it is) won't work on my iPhone.
>>
>> I'm wondering if it would be useful to write a dead simple extension
>> to provide some hints around mobile support?  Allow a Provider to
>> advertise in an XRDS file that they support a mobile login flow so
>> that Relying Parties could discover that theoretically making it so
>> that I could use a Provider such as YubiKey on the desktop and then
>> MyOpenID on the phone.
>>
>> Am I barking up a useful tree?  If I spec'd this would any Providers
>> actually implement a mobile friendly flow?
>>
>> --David
>>
>> _______________________________________________
>> general mailing list
>> general at openid.net
>> http://openid.net/mailman/listinfo/general
>
> _______________________________________________
> general mailing list
> general at openid.net
> http://openid.net/mailman/listinfo/general
>



-- 
Nat Sakimura (=nat)
http://www.sakimura.org/en/