[OpenID] OpenID in SMTP/IMAP/XMPP/etc

[John Bradley]

Yes I was talking to a Yahoo person this week at the IETF meeting about OAuth+SASL and how Connect help them streamline the experience.

We are not going to get rid of passwords until we enable all the common protocols like IMAP.

The bad user experience around IMAP and other things is done of the reasons Google's multi factor authentication hasn't gotten traction with normal people.

If you you could do a openID connect login from your IMAP client rather than having to enter a 32 character protocol password that would dramatically improve things.

Apple seems to be doing something like this for there iCloud services.  Though probably in a proprietary way.

I think it is something that should be explored.

John B.
On 2012-03-31, at 9:48 AM, Eric Sachs wrote:

> There is a similar effort of OAuth+SASL to enable OpenID.  This page has some old info
>   https://sites.google.com/site/oauthgoog/Home/oauthimap
> as well as a link to the mailing list.  Yahoo has generally been the most active in the work in this area.
> 
> 
> On Sat, Mar 31, 2012 at 7:44 AM, Simon Josefsson <simon at josefsson.org> wrote:
> It allows clients to authenticate against servers using OpenID for
> protocols that uses SASL.  That includes SMTP, IMAP, XMPP and so on.  So
> far OpenID has been for web login only, but this changes that.
> 
> /Simon
> 
> Peter Williams <home_pw at msn.com> writes:
> 
> > Why does it need to exist?
> >
> > What does it do that 156 other gss methods do not do?
> >
> > Sent from my iPhone
> >
> > On Mar 29, 2012, at 11:17 PM, "Nat Sakimura" <sakimura at gmail.com> wrote:
> >
> >> Great news!
> >>
> >> I will have a look at it.
> >>
> >> Cheers,
> >>
> >> Nat
> >>
> >> On Thu, Mar 29, 2012 at 4:29 AM, Simon Josefsson <simon at josefsson.org> wrote:
> >> Hi folks!
> >>
> >> I have been working on the IETF draft for OpenID in SASL:
> >>
> >> https://tools.ietf.org/html/draft-ietf-kitten-sasl-openid-08
> >>
> >> and now also implemented it in GNU SASL, see this writeup:
> >>
> >> https://lists.gnu.org/archive/html/help-gsasl/2012-03/msg00004.html
> >>
> >> I wanted to reach out to the OpenID community to find people who want to
> >> work on implementing/deploying this.  If you have some interest in
> >> implementing OpenID support for your SASL-based application (SMTP, IMAP,
> >> XMPP, etc) let me know and I will try to help.
> >>
> >> If anyone else has implemented the OPENID20 mechanism, I would also love
> >> to do interop testing.
> >>
> >> Cheers,
> >> /Simon
> >> _______________________________________________
> >> general mailing list
> >> general at lists.openid.net
> >> http://lists.openid.net/mailman/listinfo/openid-general
> >>
> >>
> >>
> >> --
> >> Nat Sakimura (=nat)
> >> Chairman, OpenID Foundation
> >> http://nat.sakimura.org/
> >> @_nat_en
> >>
> >> _______________________________________________
> >> general mailing list
> >> general at lists.openid.net
> >> http://lists.openid.net/mailman/listinfo/openid-general
> _______________________________________________
> general mailing list
> general at lists.openid.net
> http://lists.openid.net/mailman/listinfo/openid-general
> 
> 
> 
> -- 
> Eric Sachs | Senior Product Manager | esachs at google.com 
> 
> _______________________________________________
> general mailing list
> general at lists.openid.net
> http://lists.openid.net/mailman/listinfo/openid-general

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20120331/ed2d150e/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4937 bytes
Desc: not available
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20120331/ed2d150e/attachment.p7s>