[OpenID] Facebook support for OpenID. Where?

Andrew Arnott andrewarnott at gmail.com
Wed May 20 01:34:39 UTC 2009


--000e0cd48858132d65046a4e09fb
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

Santosh,

This isn't a farce at all, IMO.  Facebook is a very big web site and they're
rolling out OpenID RP support slowly.  Right now their UI has experienced
almost 0 change and yet they're able to start collecting data without
intruding on the users who don't know what OpenID is.  As they collect usage
data and test interoperability with various OPs, they gain confidence that
they can add some UI to the login and account creation pages so that
eventually a password will no longer be required to create an account.

I think it's a perfectly reasonable first step.

I don't like that Facebook requires access to my Contacts to hook up with
Google.  But if you don't like that, type in your own OpenID that is from an
OP that doesn't have contacts and FB can't force you to give up your
Contacts.  That's one of the pillars of OpenID: choose your OP.  And yes,
FB's auto-login feature works with any OP (not just Google, notwithstanding
the blog posts implying otherwise), as long as that OP supports
checkid_immediate, which most do.

As far as Facebook being email address centric, I don't think that has been
a blocker with Facebook becoming an RP at all.  And I'm looking forward to a
future Facebook where email address is optional, and it comes automatically
with OpenID if I say it should while logging in.

--
Andrew Arnott
"I [may] not agree with what you have to say, but I'll defend to the death
your right to say it." - S. G. Tallentyre


On Mon, May 18, 2009 at 9:08 PM, Santosh Rajan <santrajan at gmail.com> wrote:

>
> I am seeing tweets and blog posts about Facebook support for OpenID. I had
> already suggested in an earlier post that it is going to be a farce. And
> that is what it exactly is.
>
> You see, I have always maintained that it is impossible for Web site's who
> base their user identity on email addresses to support OpenID in the
> current
> form. And let me list out the problems with the so called Facebook OpenId
> support.
>
> You can't log in into Facebook with your OpenID unless you are already
> logged in to another OpenID provider. So if you fire up your browser and go
> straight to Facebook, sorry!
>
> You cannot create a Facebook account with OpenID. You need to create your
> Facebook account with your email address, and then log in to your account,
> and then go to settings, and then link your OpenID account.
>
> Ok, so I decided to link my Google Account. I found that I could not link
> to
> my Google Account without me handing over all my Google contacts! In other
> words Google log in was useless for me.
>
> When I tried to log in with Yahoo and I got the famous Yahoo message
> "Warning: This website has not confirmed its identity with Yahoo! and might
> be fraudulent. Do not share any personal information with this website
> unless you are certain it is legitimate."
>
> And what I find most embarrassing is the so called "Openid evangelists"
> going "gaga" over this release. Maybe it is "Facebook" so they better say
> good things, no matter whatever they do.
>
> -----
>
> Santosh Rajan
> http://santrajan.blogspot.com http://santrajan.blogspot.com
> --
> View this message in context:
> http://www.nabble.com/Facebook-support-for-OpenID.-Where--tp23609450p23609450.html
> Sent from the OpenID - General mailing list archive at Nabble.com.
>
> _______________________________________________
> general mailing list
> general at openid.net
> http://openid.net/mailman/listinfo/general
>

--000e0cd48858132d65046a4e09fb
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

Santosh,<br><br>This isn&#39;t a farce at all, IMO.=A0 Facebook is a very b=
ig web site and they&#39;re rolling out OpenID RP support slowly.=A0 Right =
now their UI has experienced almost 0 change and yet they&#39;re able to st=
art collecting data without intruding on the users who don&#39;t know what =
OpenID is.=A0 As they collect usage data and test interoperability with var=
ious OPs, they gain confidence that they can add some UI to the login and a=
ccount creation pages so that eventually a password will no longer be requi=
red to create an account.=A0 <br>

<br>I think it&#39;s a perfectly reasonable first step.<br><br>I don&#39;t =
like that Facebook requires access to my Contacts to hook up with Google.=
=A0 But if you don&#39;t like that, type in your own OpenID that is from an=
 OP that doesn&#39;t have contacts and FB can&#39;t force you to give up yo=
ur Contacts.=A0 That&#39;s one of the pillars of OpenID: choose your OP.=A0=
 And yes, FB&#39;s auto-login feature works with any OP (not just Google, n=
otwithstanding the blog posts implying otherwise), as long as that OP suppo=
rts checkid_immediate, which most do.<br>

<br>As far as Facebook being email address centric, I don&#39;t think that =
has been a blocker with Facebook becoming an RP at all.=A0 And I&#39;m look=
ing forward to a future Facebook where email address is optional, and it co=
mes automatically with OpenID if I say it should while logging in.<br>

<br clear=3D"all">--<br>Andrew Arnott<br>&quot;I [may] not agree with what =
you have to say, but I&#39;ll defend to the death your right to say it.&quo=
t; - S. G. Tallentyre<br>
<br><br><div class=3D"gmail_quote">On Mon, May 18, 2009 at 9:08 PM, Santosh=
 Rajan <span dir=3D"ltr">&lt;<a href=3D"mailto:santrajan at gmail.com">santraj=
an at gmail.com</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_quote" sty=
le=3D"border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex;=
 padding-left: 1ex;">

<br>
I am seeing tweets and blog posts about Facebook support for OpenID. I had<=
br>
already suggested in an earlier post that it is going to be a farce. And<br=
>
that is what it exactly is.<br>
<br>
You see, I have always maintained that it is impossible for Web site&#39;s =
who<br>
base their user identity on email addresses to support OpenID in the curren=
t<br>
form. And let me list out the problems with the so called Facebook OpenId<b=
r>
support.<br>
<br>
You can&#39;t log in into Facebook with your OpenID unless you are already<=
br>
logged in to another OpenID provider. So if you fire up your browser and go=
<br>
straight to Facebook, sorry!<br>
<br>
You cannot create a Facebook account with OpenID. You need to create your<b=
r>
Facebook account with your email address, and then log in to your account,<=
br>
and then go to settings, and then link your OpenID account.<br>
<br>
Ok, so I decided to link my Google Account. I found that I could not link t=
o<br>
my Google Account without me handing over all my Google contacts! In other<=
br>
words Google log in was useless for me.<br>
<br>
When I tried to log in with Yahoo and I got the famous Yahoo message<br>
&quot;Warning: This website has not confirmed its identity with Yahoo! and =
might<br>
be fraudulent. Do not share any personal information with this website<br>
unless you are certain it is legitimate.&quot;<br>
<br>
And what I find most embarrassing is the so called &quot;Openid evangelists=
&quot;<br>
going &quot;gaga&quot; over this release. Maybe it is &quot;Facebook&quot; =
so they better say<br>
good things, no matter whatever they do.<br>
<br>
-----<br>
<br>
Santosh Rajan<br>
<a href=3D"http://santrajan.blogspot.com" target=3D"_blank">http://santraja=
n.blogspot.com</a> <a href=3D"http://santrajan.blogspot.com" target=3D"_bla=
nk">http://santrajan.blogspot.com</a><br>
<font color=3D"#888888">--<br>
View this message in context: <a href=3D"http://www.nabble.com/Facebook-sup=
port-for-OpenID.-Where--tp23609450p23609450.html" target=3D"_blank">http://=
www.nabble.com/Facebook-support-for-OpenID.-Where--tp23609450p23609450.html=
</a><br>


Sent from the OpenID - General mailing list archive at Nabble.com.<br>
<br>
_______________________________________________<br>
general mailing list<br>
<a href=3D"mailto:general at openid.net">general at openid.net</a><br>
<a href=3D"http://openid.net/mailman/listinfo/general" target=3D"_blank">ht=
tp://openid.net/mailman/listinfo/general</a><br>
</font></blockquote></div><br>

--000e0cd48858132d65046a4e09fb--


More information about the general mailing list