[OpenID] OpenID Biz Case, etc
Paul Madsen
paulmadsen at rogers.com
Wed Apr 1 10:21:16 UTC 2009
A nit, OpenID does not 'support'
o Sign-in via client side SSL Certificates
o Image based passwords and recovery
o 2-factor authentication such as password+text message
but rather is orthogonal (mostly) to the actual authentication mechanism.
paul
Jonathan Coffman wrote:
> Hey there all, If you have a moment to breeze through the following I
> would really appreciate it.
>
> Here's the situation: we're a major media company who is scrapping all
> prior user authentication systems and building from the ground-up. I'm
> working to make the case that OpenID absolutely has to be a key
> component of this new system. Am I missing key points or
> mis-characterizing the things I've learned? (I've read through many
> blog posts, watched all kinds of presentations on slideshare, etc to
> compile the below)
>
> -- btw: I do plan to post this to my blog once it's a little more
> fleshed out.
>
> ==========
> OpenID Business Case
>
> Summary: OpenID is an emerging web standard upon which users are able
> to use existing accounts from major providers, like Google and Yahoo,
> in order to sign in to other sites. In support of TKTKT commitment to
> open standards and given that OpenID is quickly becoming a market
> requirement the TKT Universal Authentication System will take
> advantage of the technology.
>
> Key Reasons to use OpenID:
>
> · OpenID is a system for decentralized single sign-on; it solves
> the technology problem of duplicate usernames and the user problem of
> having to manage multiple usernames and passwords securely.
>
> · Users control and manage their own identity, which aligns with
> the TKTKTK mission of empowering users to participate as well as our
> dedication to open standards and technology.
>
> · Simple Registration system in OpenID can help users fill out
> their registration form with things like their name, email address,
> location, etc without us having to force them to fill out those fields.
>
> · The OpenID provider's business is authentication; they can
> invest much more effort than we can in securing user's data and
> information than we can.
>
> · Increase in number of sign-ups due to fewer form fields to fill
> out during registration, and ease of user interface.
> · Persistent log-ins, each time the user opens the site they
> don't have to sign-in again.
> · Fewer support resources necessary as users rely on their
> identity provider of choice.
> · Being an open standard, hundreds of people are working to
> enhance the technology and TKT has an opportunity to not only
> participate, but also give back.
> · Marketing and promotional opportunities around TKT adoption of
> the OpenStack would be seen as an extremely positive move in the
> technology community and return positive buzz.
>
> User Adoption: There are over 500 million OpenID enabled users
> originating from the following sites and thousands more:
>
> · AOL
>
> · Yahoo
>
> · Blogger
>
> · Flickr
>
> · Livedoor
>
> · LiveJournal
>
> · Wordpress.com
>
> · SmugMug
>
> · Technorati
>
> · Orange
>
> · Vox
>
> · ClaimID
>
> · MyOpenID
>
> · MyID.net
>
> · Myvidoop
>
> · Verisign
>
>
> Market Support:
>
> · Google, IBM, Microsoft, VeriSign, Yahoo, PayPal, Verisign, and
> Facebook all have representatives on the OpenID board.
> · Those companies and many more are heavily invested in seeing
> this standard adopted, and competing technologies have folded into the
> OpenStack and are concentrating on their own individual niches as
> enhancements rather than replacements of OpenID (oAuth,
> ActivityStreams, PortableContacts, MicroFormats).
> · Users expect for their data to be portable between sites, a
> social network or site with social functionality that does not allow
> the user to take their information with them across the web is going
> against the marketplace.
> · Over 35,000 sites currently accept OpenIDs (with sites like
> Blogger and WordPress being counted as single sites despite having
> millions of blogs).
> · Whitelabel social networking products have already enabled all
> of their customers to begin accepting OpenID, including Ning and
> KickApps, and pbWiki.
>
> TKT Technology Platforms Support - The following software in-use on
> TKTKTKT and TKTKT web sites support OpenID already:
>
> · MovableType (out of the box)
> · WordPress (well-tested module)
> · Drupal (out of the box)
> · Joomla (out of the box)
> · Plone (out of the box)
> · Atlassian (JIRA) (out of the box)
> · Basecamp/Backpack/HighRise (out of the box)
> · MediaWiki (extension)
>
> At the end of the list I included some of the products we use
> internally as well because let's not forget the efficiencies created
> in utilizing a web standard for our own internal usage as well.
>
> Security Benefits:
>
> · TKTK doesn't have security efforts, nor should we be in the
> business of managing user's online identities, especially given the
> amount of data and information that is collected by systems.
> · OpenID supports alternative methods of authentication beyond
> anything that we would actually need such as:
> o Sign-in via client side SSL Certificates
> o Image based passwords and recovery
> o 2-factor authentication such as password+text message
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> general mailing list
> general at openid.net
> http://openid.net/mailman/listinfo/general
>
> ------------------------------------------------------------------------
>
>
> No virus found in this incoming message.
> Checked by AVG - www.avg.com
> Version: 8.5.285 / Virus Database: 270.11.35/2033 - Release Date: 03/31/09 13:05:00
>
>
--
Paul Madsen
e:paulmadsen @ ntt-at.com
m:613-282-8647
web:connectid.blogspot.com
ConnectID <http://feeds.feedburner.com/%7Er/blogspot/gMwy/%7E6/1>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20090401/6545d16a/attachment-0002.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: gMwy.1.gif
Type: image/gif
Size: 22200 bytes
Desc: not available
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20090401/6545d16a/attachment-0002.gif>
More information about the general
mailing list