[OpenID] One-Click OpenID: A Solution to the NASCAR Problem

[Dick Hardt]

On Feb 14, 2012, at 11:01 PM, Francisco Corella wrote:
> Everybody:
> 
> Before telling me that what I'm proposing has been done before, please
> read what I'm proposing. 

I did. 

> The user clicks on the button and is
> automagically redirected to her preferred OpenID provider, even if the
> relying party has never heard of it.

got that the first time, see below

> 
> Hint: if you want to criticize this, you could criticize the fact
> that it requires an ad-hoc HTTP header, and ad-hoc HTML tag, and new
> browser functionality. 

The ad-hoc HTTP header and ad-hoc HTML tag are not needed to solve the NASCAR problem. By adding code to the browser, you could work with existing OpenID providers and RPs.

We did this with Sxipper 4 years ago. Sxipper remembered your OPs, detected an OpenID login form, and allowed the user to select which OP to use at the RP. It remembered which OP you had used at that RP last and put it on top. It detected when you logged into an OP to add it to the list of OPs available.

Detecting RP forms and OPs was non-trivial, and some additional HTML markup would have made it easier and more robust.

As I stated before, this does not solve the problem for users without an enhanced browser. 

-- Dick


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20120215/01130e74/attachment.html>