<HTML>
<HEAD>
<TITLE>Re: popup protocol UX? Re: [OpenID] FB Connect, OpenID and UX</TITLE>
</HEAD>
<BODY>
<BLOCKQUOTE><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'>> It's nice that the real Connect API opens a popup with the Location bar<BR>
> intact so the user gets some hints as to the legitimacy of the popup asking<BR>
> for their credentials. Has Facebook done any usability testing to see how<BR>
> users would react to [various suggestions]<BR>
<BR>
We have done a lot of testing in this area, although we haven’t publicly shared any of it at this point. We are actively researching phishing prevention. <BR>
<BR>
>From Allen Tom:<BR>
> The Connect popup could be improved a bit by using HTTPS, and perhaps setting the hostname to something a bit shorter and more recognizable, like <a href="https://login.facebook.com">https://login.facebook.com</a> <BR>
<BR>
Those are both great suggestions.<BR>
</SPAN></FONT></BLOCKQUOTE>
</BODY>
</HTML>