[OpenID] Google Blogger and openid. Does it really work? (today?)

Wed Mar 26 17:38:36 UTC 2008

I just left a comment on your blog with my LiveJournal OpenID and everything
worked fine. I was not signed in with my Google account or anything.

Lukas

Von: general-bounces at openid.net [mailto:general-bounces at openid.net] Im
Auftrag von John Panzer
Gesendet: Mittwoch, 26. März 2008 18:21
An: Peter Williams
Cc: general at openid.net
Betreff: Re: [OpenID] Google Blogger and openid. Does it really work?
(today?)

Never attribute to malice that which can be safely explained by a bug; there
is no intent to require one to be signed in with a Google account in order
to use an OpenID.  But: I still can't reproduce this.  Just left a comment
alongside yours, after signing out of my Google account and using my
jpanzer.myopenid.com OpenID:
http://www.abstractioneer.org/2008/02/openid-foundation-google-yahoo.html

So clearly there's something going wrong but I'm having difficulty
reproducing what you're seeing.  Could you mail me off-list with the
detailed steps, OS, browser, combo you're using?  

Peter Williams wrote: 

I cannot say the mystery is solved, but I made some progress. 

Now to Facts 

- creating a google account takes moments

- one can setup blogger service from the dashboard

- One can alter settings and comments, to allow commenting by "registered
users, including openid".

- once logged into Google Account, the blog owner can leave an authenticated
comment on http://openid2.blogspot.com/.

- once logged into Google Account, I could leave an authenticated comment on
John's blogger comment form.

Conjecture:

Be it Bug or "designer-bug", it appears (a) one must have a Google Account
(b) be subject to its (hardly onerous) legal provisions, (c) be signed in as
a subscriber.... to leave an authenticated comment using the
pseudoanonymising features of leaving a comment as a "registered user - via
OpenID".

Interesting apparent legal strategy on Google's part, which really doesn't
surprise me (given the sheer risk of being a relying party in UK/US). The
subscriber leaving the comment is required to be and must assert to be
Google Account member, subject to Google legal terms.

Is this policy "consistent" with the UCI component of the "UCI" vision,
folks? 

I'm kind of disappointed (tho not totally surprised at a gigafirm with giga
reliance-time risks protecting itself legally, this way).

If the Blogger anonymous URL feature works as one might expect, there may be
an opportunity for a sxipper type plugin/service (which Ive still never
used, sorry I dont use FF) to act as a proxy OpenID consumer, form-posting a
"unique trackback-openid' into the Google anonymous URL commenting field,
that tracksback back to the actual consumed openid presented from the
sxipper log files.

  _____  

From: John Panzer
Sent: Tue 3/25/2008 7:03 PM
To: Peter Williams
Cc: general at openid.net
Subject: Re: [OpenID] Google Blogger and openid. Does it really work?
(today?)

So, commenting on Blogger using my ID http://jpanzer.myopenid.com/ works
fine for me (on FF2 and IE7).  For Peter it appears that something is
failing and Blogger is acting as if a non-OpenID URL was entered.  Anyone
else care to try?

Peter Williams wrote: 

Thanks for trying, John. Using your parameters made no difference; pdf
evidence attached. I would not normally discuss a particular vendor (unlike
the work of open source projects... who usually relish out the air time),
but its such a high profile claim for OpenID2 adoption that Blogger
works.... that it NEEDS to work NOW, for the average Joe against the OpenID
gold standard - "myopenid" URLs.

  _____  

From: John Panzer
Sent: Tue 3/25/2008 3:21 PM
To: Peter Williams
Cc: general at openid.net
Subject: Re: [OpenID] Google Blogger and openid. Does it really work?
(today?)

Blogger is currently at OpenID 1.1 and doesn't yet support i-names
(@blog*lockbox).  I was able to publish a comment using
http://jpanzer.myopenid.com/.  Obviously I can't test the others :).

http://www.abstractioneer.org/ is OpenID-comment-enabled.

Peter Williams wrote: 

Can someone point me at a Google blogger endpoint that has recently accepted
their openid, please?

On a particular blogsite, all I get is "OpenID url is missing", for
@blog*lockbox, http://rapattoni.trustbearer.com/lockbox, and
homepw.myopenid.com

  _____  

_______________________________________________
general mailing list
general at openid.net
http://openid.net/mailman/listinfo/general

  _____  

_______________________________________________
general mailing list
general at openid.net
http://openid.net/mailman/listinfo/general

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20080326/04d76151/attachment-0002.htm>