[OpenID] Proxying (with OpenSocial) through experimental.openid.net to promote OpenID

SitG Admin sysadmin at shadowsinthegarden.com
Mon Aug 10 02:09:40 UTC 2009


Disclaimer: though I like this idea - it would be *neat* if users of 
a site that didn't even allow HTML headers to be inserted/set (but 
did support OpenSocial), could experiment with a watered-down version 
of OpenID ("fewer sites than the real OpenID!"), then begin 
collectively badgering the site owners to put in full OpenID for them 
- I'm horrified at its privacy implications.

http://www.disruptiveconversations.com/2007/08/identitude---us.html

That page has a good description of how identitu.de hosted a Facebook 
application that translated FB's authentication (through *their* API) 
into OpenID signals, so Facebook users could use their Identity there 
as a URI - but indirectly, of course, since it was actually a page at 
identitu.de which correlated with their Facebook page.

Skeptical, anyone? Of course - because who was behind identitu.de? 
Anyone *we* knew? RP's would have to trust that person, too. I 
propose addressing this particular concern by asking the Foundation 
to host the proxy - under 'experimental', of course, because users 
*shouldn't* be looking upon this as a long-term solution, it should 
just be there to give them a taste of OpenID so they can talk their 
site into giving them the real thing.

URI uniting would be a must for some RP's (otherwise users would lose 
all the data and privileges they had associated with their 
experimental.openid.net URI's when they switched to their site's 
official URI's), but that could be developed later on since there 
wouldn't be any immediate need for it.

-Shade


More information about the general mailing list