[OpenID] Google Blogger and openid. Does it really work? (today?)

John Panzer jpanzer at acm.org
Wed Mar 26 17:20:56 UTC 2008


Never attribute to malice that which can be safely explained by a bug; 
there is no intent to require one to be signed in with a Google account 
in order to use an OpenID.  But: I still can't reproduce this.  Just 
left a comment alongside yours, after signing out of my Google account 
and using my jpanzer.myopenid.com OpenID: 
http://www.abstractioneer.org/2008/02/openid-foundation-google-yahoo.html

So clearly there's something going wrong but I'm having difficulty 
reproducing what you're seeing.  Could you mail me off-list with the 
detailed steps, OS, browser, combo you're using? 

Peter Williams wrote:
> I cannot say the mystery is solved, but I made some progress. 
>
> Now to Facts
>  
> - creating a google account takes moments
>  
> - one can setup blogger service from the dashboard
>  
> - One can alter settings and comments, to allow commenting by 
> "registered users, including openid".
>  
> - once logged into Google Account, the blog owner can leave an 
> authenticated comment on http://openid2.blogspot.com/.
>  
> - once logged into Google Account, I could leave an authenticated 
> comment on John's blogger comment form.
>  
>  
> Conjecture:
>  
> Be it Bug or "designer-bug", it appears (a) one must have a Google 
> Account (b) be subject to its (hardly onerous) legal provisions, (c) 
> be signed in as a subscriber.... to leave an authenticated comment 
> using the pseudoanonymising features of leaving a comment as a 
> "registered user - via OpenID".
>  
> Interesting apparent legal strategy on Google's part, which really 
> doesn't surprise me (given the sheer risk of being a relying party in 
> UK/US). The subscriber leaving the comment is required to be and must 
> assert to be Google Account member, subject to Google legal terms.
>  
> Is this policy "consistent" with the UCI component of the "UCI" 
> vision, folks?
>  
> I'm kind of disappointed (tho not totally surprised at a gigafirm with 
> giga reliance-time risks protecting itself legally, this way).
>  
> If the Blogger anonymous URL feature works as one might expect, there 
> may be an opportunity for a sxipper type plugin/service (which Ive 
> still never used, sorry I dont use FF) to act as a proxy OpenID 
> consumer, form-posting a "unique trackback-openid' into the Google 
> anonymous URL commenting field, that tracksback back to the actual 
> consumed openid presented from the sxipper log files.
>  
>  
>  
>  
>
>  
> ------------------------------------------------------------------------
> *From:* John Panzer
> *Sent:* Tue 3/25/2008 7:03 PM
> *To:* Peter Williams
> *Cc:* general at openid.net
> *Subject:* Re: [OpenID] Google Blogger and openid. Does it really 
> work? (today?)
>
> So, commenting on Blogger using my ID http://jpanzer.myopenid.com/ 
> works fine for me (on FF2 and IE7).  For Peter it appears that 
> something is failing and Blogger is acting as if a non-OpenID URL was 
> entered.  Anyone else care to try?
>
> Peter Williams wrote:
>> Thanks for trying, John. Using your parameters made no difference; 
>> pdf evidence attached. I would not normally discuss a particular 
>> vendor (unlike the work of open source projects... who usually relish 
>> out the air time), but its such a high profile claim for OpenID2 
>> adoption that Blogger works.... that it NEEDS to work NOW, for 
>> the average Joe against the OpenID gold standard - "myopenid" URLs.
>>
>> ------------------------------------------------------------------------
>> *From:* John Panzer
>> *Sent:* Tue 3/25/2008 3:21 PM
>> *To:* Peter Williams
>> *Cc:* general at openid.net
>> *Subject:* Re: [OpenID] Google Blogger and openid. Does it really 
>> work? (today?)
>>
>> Blogger is currently at OpenID 1.1 and doesn't yet support i-names 
>> (@blog*lockbox).  I was able to publish a comment using 
>> http://jpanzer.myopenid.com/.  Obviously I can't test the others :).
>>
>> http://www.abstractioneer.org/ is OpenID-comment-enabled.
>>
>> Peter Williams wrote:
>>> Can someone point me at a Google blogger endpoint that has recently 
>>> accepted their openid, please?
>>>  
>>> On a particular blogsite, all I get is "OpenID url is missing", for 
>>> @blog*lockbox, http://rapattoni.trustbearer.com/lockbox, and 
>>> homepw.myopenid.com
>>>  
>>>  
>>> ------------------------------------------------------------------------
>>>
>>> _______________________________________________
>>> general mailing list
>>> general at openid.net
>>> http://openid.net/mailman/listinfo/general
>>>   
>>
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> general mailing list
> general at openid.net
> http://openid.net/mailman/listinfo/general
>   

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20080326/827bb8bb/attachment-0002.htm>


More information about the general mailing list