[OpenID] OpenID 2.0 directed identity - Facebook / Microsoft

SitG Admin sysadmin at shadowsinthegarden.com
Thu Sep 9 18:29:19 UTC 2010


>OpenID is used for our Gmail and Yahoo imports and has been for some time.
>
>You can also link any OpenID with your account in your account 
>settings, but there's no way to sign up for Facebook using an 
>arbitrary OpenID account.

I'll try to clarify with a use-case:

You have a Facebook account but I do not; you want to see my photos 
and other personal data, but I am not willing to create a Facebook 
account or otherwise subject my data to Facebook's policies. XAuth 
seems indicated, or you can use the OpenID associated with your 
Facebook page to log into *my* sites and authenticate yourself as an 
approved recipient of that data - except that, for this to happen, 
*my* sites have to be willing to accept your logins from Facebook 
without, necessarily, giving you an account there. So, flip it 
around; if you want to share *your* photos with *me*, do you have to 
use XAuth so Facebook can send them to my site, or can Facebook 
accept my OpenID so it knows that *I'm* the user who you wanted to 
see everything?

-Shade

>On Sep 5, 2010, at 12:04 AM, SitG Admin wrote:
>
>>>  Facebook is a relying party. We accept identifiers that direct to 
>>>another location (although not perfectly).
>>
>>  Confusion in advertising: is OpenID a technical measure (providing 
>>outsourced authentication) or a social measure (providing 
>>cross-recognized identity)? With differences in ToS between various 
>>sites, I see a severe distinction between "OpenID will let you 
>>share your profile data on one service with users on another 
>>service." and "OpenID will let you sign up for an account at sites 
>>you already didn't want to have an account at."
>>
>>  -Shade



More information about the general mailing list