[OpenID] One-Click OpenID: A Solution to the NASCAR Problem

Wed Feb 15 02:25:44 UTC 2012

I think if may be time to bring back your xri server (using hxrns) and Openid protocol endpoint. Perhaps the  server could produce 2 representations : the XML Xrd, and the HTML microdata formats, using the relevant data dictionaries used in the linked data world for such relationships. 

Even if the world has moved beyond native xri, there is plenty to showcase and repupose from that world - that will be required in a national scale program.

Since Openid is all about dynamic Discovery , why not repurpose the server as an Xrd dynamic minting/signing/hosting service (for on premise clouds rather than the current marketplaces world of google/amazon/Msft platform services.)

Rather than the Xrd being for individuals  (with each sep pointing to one of the various Idps that might be authorized to  speak for the identifier), perhaps the same basic mechanism is hosting for a million Idps which sp (endpoints) they have registered, for each (privacy) policy on attribute exchange.

Sent from my iPhone

On Feb 14, 2012, at 2:42 PM, "Markus Sabadello" <markus.sabadello at gmail.com> wrote:

> Yes this has existed before.
> At the OpenID Summit in Nov 2009, this was called "OpenID Selector", and then later "Active Client".
> Mike Jones did a demo of an OpenID-enabled version of CardSpace that could remember your OpenIDs and allowed one-click login.
> And myself, I did a demo of the Higgins equivalent.
> Here are some old slides and info:
> http://wiki.openid.net/w/page/12995207/2009%20OpenID%20Summit 
> 
> Markus
> -- 
> Project Danube: http://projectdanube.org/
> PDEC: http://personaldataecosystem.org/
> 
> On Tue, Feb 14, 2012 at 7:18 AM, Chris Messina <chris.messina at gmail.com> wrote:
> 
> 
> On Monday, February 13, 2012, Francisco Corella <fcorella at pomcor.com> wrote:
> > Chris,
> >
> >> You may also be interested in some of the Social Agent work I did with
> >> Mozilla around baking identity into the browser:
> >>
> >> http://factoryjoe.com/social-agent/
> >> http://factoryjoe.com/blog/2010/03/12/the-social-agent-part-2-connect/
> >
> > Thanks for link.  Interesting.  I agree that there are similarities.
> > In particular, your Activate step is similar to setting an identity
> > provider as the default in my scheme.
> >
> >> So long as choice of IDP is something that you want to provide the
> >> user, something like the NASCAR, a search box, or an email field will
> >> still be necessary to help them get started.
> >
> > No.  A solution based on a cookie set by relying party to remember
> > what identity provider has been used on a previous visit would need
> > something to "get started".  
> 
> Right, I'm asking about the first time visit. Not about a re-visit. 
> 
> > But in my solution the <idp> element
> > tells the relying party what identity provider the user wants to use
> > even if the user has never visited the relying party before.
> 
> I believe this was a feature of CardSpace/Infocard. 
> 
> 
> >
> > Francisco
> >
> > ________________________________
> > From: Chris Messina <chris.messina at gmail.com>
> > To: Francisco Corella <fcorella at pomcor.com>; Dick Hardt <dick.hardt at gmail.com>
> > Cc: OpenID General <openid-general at lists.openid.net>; Karen Lewison <kplewison at pomcor.com>
> > Sent: Monday, February 13, 2012 6:52 PM
> > Subject: Re: [OpenID] One-Click OpenID: A Solution to the NASCAR Problem
> >
> > You may also be interested in some of the Social Agent work I did with Mozilla around baking identity into the browser:
> > http://factoryjoe.com/social-agent/
> > http://factoryjoe.com/blog/2010/03/12/the-social-agent-part-2-connect/
> > So long as choice of IDP is something that you want to provide the user, something like the NASCAR, a search box, or an email field will still be necessary to help them get started.
> >
> > On Mon, Feb 13, 2012 at 5:12 PM, Dick Hardt <dick.hardt at gmail.com> wrote:
> >
> > Not really a new idea -- but nice to see people are still thinking about things.
> > Challenges:
> > How do you deal with the user getting a new machine? Is there a way to sync IDPs or does the user need to log into all the IDPs on a new machine before they can log into sites?
> > How does this degrade for browsers that do not support storing the IDP (i.e., all the existing browsers out there)?
> > -- Dick
> > On Feb 13, 2012, at 6:00 PM, Francisco Corella wrote:
> >
> > FYI:
> > One-Click OpenID: A Solution to the NASCAR Problem, blog post at
> > http://pomcor.com/2012/02/13/one-click-openid-a-solution-to-the-nascar-problem/
> > Comments welcome.
> >
> > Francisco
> >
> > Francisco Corella, PhD
> > Founder & CTO, Pomcor
> > Twitter: @fcorella
> > Blog: http://pomcor.com/blog/
> > Web site: http://pomcor.com
> > _______________________________________________
> > general mailing list
> > general at lists.openid.net
> > http://lists.openid.net/mailman/listinfo/openid-general
> >
> >
> > _______________________________________________
> > general mailing list
> > general at lists.openid.net
> > http://lists.openid.net/mailman/listinfo/openid-general
> >
> >
> >
> >
> > --
> > Chris Messina
> > User Experience Designer, Google
> >
> > //chrismessina.me | + | @chrismessina
> > This email is:   [ ] shareable    [✔] ask first   [ ] private
> >
> >
> >
> 
> -- 
> Chris Messina
> User Experience Designer, Google
> 
> //chrismessina.me | + | @chrismessina
> 
> This email is:   [ ] shareable    [✔] ask first   [ ] private
> 
> _______________________________________________
> general mailing list
> general at lists.openid.net
> http://lists.openid.net/mailman/listinfo/openid-general
> 
> 
> 
> 
> 
> _______________________________________________
> general mailing list
> general at lists.openid.net
> http://lists.openid.net/mailman/listinfo/openid-general
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20120214/c99b177a/attachment.html>