<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:p="urn:schemas-microsoft-com:office:powerpoint" xmlns:a="urn:schemas-microsoft-com:office:access" xmlns:dt="uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" xmlns:s="uuid:BDC6E3F0-6DA3-11d1-A2A3-00AA00C14882" xmlns:rs="urn:schemas-microsoft-com:rowset" xmlns:z="#RowsetSchema" xmlns:b="urn:schemas-microsoft-com:office:publisher" xmlns:ss="urn:schemas-microsoft-com:office:spreadsheet" xmlns:c="urn:schemas-microsoft-com:office:component:spreadsheet" xmlns:odc="urn:schemas-microsoft-com:office:odc" xmlns:oa="urn:schemas-microsoft-com:office:activation" xmlns:html="http://www.w3.org/TR/REC-html40" xmlns:q="http://schemas.xmlsoap.org/soap/envelope/" xmlns:D="DAV:" xmlns:mt="http://schemas.microsoft.com/sharepoint/soap/meetings/" xmlns:x2="http://schemas.microsoft.com/office/excel/2003/xml" xmlns:ois="http://schemas.microsoft.com/sharepoint/soap/ois/" xmlns:dir="http://schemas.microsoft.com/sharepoint/soap/directory/" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:dsp="http://schemas.microsoft.com/sharepoint/dsp" xmlns:udc="http://schemas.microsoft.com/data/udc" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:sub="http://schemas.microsoft.com/sharepoint/soap/2002/1/alerts/" xmlns:ec="http://www.w3.org/2001/04/xmlenc#" xmlns:sp="http://schemas.microsoft.com/sharepoint/" xmlns:sps="http://schemas.microsoft.com/sharepoint/soap/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:udcs="http://schemas.microsoft.com/data/udc/soap" xmlns:udcxf="http://schemas.microsoft.com/data/udc/xmlfile" xmlns:udcp2p="http://schemas.microsoft.com/data/udc/parttopart" xmlns:wf="http://schemas.microsoft.com/sharepoint/soap/workflow/" xmlns:dsss="http://schemas.microsoft.com/office/2006/digsig-setup" xmlns:dssi="http://schemas.microsoft.com/office/2006/digsig" xmlns:mdssi="http://schemas.openxmlformats.org/package/2006/digital-signature" xmlns:mver="http://schemas.openxmlformats.org/markup-compatibility/2006" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns:mrels="http://schemas.openxmlformats.org/package/2006/relationships" xmlns:spwp="http://microsoft.com/sharepoint/webpartpages" xmlns:ex12t="http://schemas.microsoft.com/exchange/services/2006/types" xmlns:ex12m="http://schemas.microsoft.com/exchange/services/2006/messages" xmlns:pptsl="http://schemas.microsoft.com/sharepoint/soap/SlideLibrary/" xmlns:spsl="http://microsoft.com/webservices/SharePointPortalServer/PublishedLinksService" xmlns:Z="urn:schemas-microsoft-com:" xmlns:st="" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";
color:black;}
span.apple-style-span
{mso-style-name:apple-style-span;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;
color:black;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body bgcolor=white lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>And why does the board and “founders” seek to
exercise SO much control?<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<div style='border:none;border-left:solid blue 1.5pt;padding:0in 0in 0in 4.0pt'>
<div>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif";
color:windowtext'>From:</span></b><span style='font-size:10.0pt;font-family:
"Tahoma","sans-serif";color:windowtext'> general-bounces@openid.net
[mailto:general-bounces@openid.net] <b>On Behalf Of </b>Allen Tom<br>
<b>Sent:</b> Thursday, March 19, 2009 11:40 AM<br>
<b>To:</b> Brett McDowell<br>
<b>Cc:</b> board@openid.net; general@openid.net List<br>
<b>Subject:</b> Re: [OpenID] Fwd: [OpenID Foundation] New Poll Opened<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>Hi Brett,<br>
<br>
The original proposal was to name the WG the "Popup WG" but after the
scope was expanded to include language preference, we renamed it the OpenID UI
WG. Although the scope of UI Extension 1.0 is strictly limited to the
Popup UI and the Language Preference, we hope that the 1.0 extension defines an
mechanism that can be reused for future UI enhancements. <br>
<br>
I do think that there is way too much overhead in forming an OpenID WG. The UI
WG will be the fastest WG ever created, taking approximately 6 weeks to create,
which I feel is 5 weeks too long.<br>
<br>
With regards to having the user enter their credentials in a popup window,
there are many OPs and RPs that would like to use this feature immediately, and
are waiting for a standard interface to be defined. Phishing still is a major
concern, however, we do not think that the popup window significantly changes
the phishing scenarios compared to the existing full browser window UIs today.
We do think that the Popup UI will significantly increase the usability of
OpenID, would could increase the demand for anti-phishing solutions, as OpenID
becomes more widely used.<br>
<br>
Allen<br>
<br>
Brett McDowell wrote: <o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<div>
<p class=MsoNormal>This proposal is specifically scoped to a pop-up window
paradigm. Therefore it concerns me that the specification is going to be
branded "OpenID User Interface Extension 1.0" and the Working Group
will be branded *the* "OpenID User Interface Working Group".
Certainly there must be other approaches to improving OpenID UI.
Hasn't the eCommerce industry been teaching users to never put their
credentials into a pop-up window for fear of phishing? <o:p></o:p></p>
<div>
<p class=MsoNormal><o:p> </o:p></p>
</div>
<div>
<p class=MsoNormal>I would like to vote in favor of this Working Group but I
cannot support it as written. I humbly suggest the following changes:<o:p></o:p></p>
</div>
<div>
<p class=MsoNormal><o:p> </o:p></p>
</div>
<div>
<p class=MsoNormal>Name to: "OpenID Pop-Up User Interface Working
Group"<o:p></o:p></p>
</div>
<div>
<p class=MsoNormal>Specification to: "OpenID Pop-Up User Interface
Extension 1.0"<o:p></o:p></p>
</div>
<div>
<p class=MsoNormal><o:p> </o:p></p>
</div>
<div>
<p class=MsoNormal>Those two minor changes would signify an awareness that
there may be other approaches to improving the OpenID UI, and it might even
encourage some alternative proposals to come forward which will only strengthen
OpenID UI down-the-road.<o:p></o:p></p>
<div>
<p class=MsoNormal><o:p> </o:p></p>
</div>
<div>
<p class=MsoNormal>P.S.<o:p></o:p></p>
</div>
<div>
<p class=MsoNormal>If I'm out-of-compliance with OIDF process please let me
know and point me to the process document I should reference in the future.<o:p></o:p></p>
</div>
<div>
<p class=MsoNormal><o:p> </o:p></p>
</div>
<div>
<p class=MsoNormal>Thank you,<o:p></o:p></p>
</div>
<div>
<p class=MsoNormal><o:p> </o:p></p>
<div>
<div>
<div>
<p class=MsoNormal><span style='font-size:9.0pt;font-family:"Helvetica","sans-serif"'>Brett
McDowell | +1.413.652.1248 | <a href="http://info.brettmcdowell.com">http://info.brettmcdowell.com</a><o:p></o:p></span></p>
</div>
</div>
</div>
<div>
<p class=MsoNormal><o:p> </o:p></p>
<div>
<p class=MsoNormal>Begin forwarded message:<o:p></o:p></p>
</div>
<p class=MsoNormal><br>
<br>
<o:p></o:p></p>
<div>
<div>
<p class=MsoNormal><b><span style='font-size:9.0pt;font-family:"Helvetica","sans-serif"'>From:
</span></b><span style='font-size:9.0pt;font-family:"Helvetica","sans-serif"'><a
href="mailto:membership@oidf.org">membership@oidf.org</a></span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal><b><span style='font-size:9.0pt;font-family:"Helvetica","sans-serif"'>Date:
</span></b><span style='font-size:9.0pt;font-family:"Helvetica","sans-serif"'>March
19, 2009 9:40:23 AM EDT</span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal><b><span style='font-size:9.0pt;font-family:"Helvetica","sans-serif"'>To:
</span></b><span style='font-size:9.0pt;font-family:"Helvetica","sans-serif"'><a
href="mailto:brett@ICTprojects.com">brett@ICTprojects.com</a></span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal><b><span style='font-size:9.0pt;font-family:"Helvetica","sans-serif"'>Subject:
[OpenID Foundation] New Poll Opened</span></b><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal><o:p> </o:p></p>
</div>
</div>
<div>
<p class=MsoNormal>Hello Brett McDowell,<br>
<br>
Voting has opened on the following poll -- please register your vote before
2009-03-26.<br>
<br>
Link: <a href="https://openid.net/foundation/members/polls/15">https://openid.net/foundation/members/polls/15</a><br>
<br>
Title: Approve the Creation of the OpenID User Interface Working Group<br>
<br>
Description: The Specifications Council recommends that the Foundation members
approve the creation of the OpenID User Interface Working Group, as proposed
below.<br>
<br>
Name<br>
<br>
OpenID User Interface Working Group<br>
<br>
<br>
Background Information<br>
<br>
OpenID traditionally requires the Relying Party to redirect the entire <br>
browser window to the OpenID Provider for the user to authenticate <br>
before redirecting the browser back to the Relying Party. It is believed <br>
that the User Experience (UX) could be significantly improved if the <br>
authentication flow occurred within a smaller popup window, making the <br>
experience less disruptive to the user. <br>
<br>
Although it is possible for Relying Parties to open a popup window for <br>
the user to authenticate at the OpenID Provider using the Provider's <br>
default user interface, the overall user experience can be optimized if <br>
the OP was aware that its UI was running within a popup. For instance, <br>
an OP may want to resize the popup browser window when using the popup <br>
interface, but would probably not want to resize the full browser window <br>
when using the default redirect interface. Another optimization is that <br>
the OP can close the popup, rather than return a negative assertion if <br>
the user chooses to cancel the authentication request. <br>
<br>
Users who begin the OpenID sign in process on a Relying Party in one <br>
language and then transition to their OpenID Provider's site in a <br>
different language may find the overall experience to be very <br>
disruptive. In many cases, the Relying Party may want to pass a language <br>
hint to the OpenID Provider to use to display the User Interface to the <br>
user, especially if the user is not already authenticated at the OP.<br>
<br>
<br>
<br>
<br>
Statement of Purpose<br>
<br>
This workgroup intends to produce a very brief OpenID extension to <br>
enable the OpenID Authentication User Interface to be invoked in a <br>
standalone popup window, and to allow the Relying Party to request that <br>
the user interface be displayed in a particular language.<br>
<br>
<br>
<br>
<br>
Scope<br>
<br>
Produce an extension that allows an OpenID Provider to indicate its <br>
support of a popup friendly user interface, as opposed to the default <br>
user interface optimized for a full browser window. The popup must be in <br>
an independent browser window, and must not be framed by the RP. <br>
<br>
<br>
<br>
The extension will also define a mechanim for RPs to pass a language <br>
hint to the OP to help determine the langange used to display the OpenID <br>
Authentication user interface.<br>
<br>
<br>
Out of Scope <br>
<br>
The content of the user interface other than the language that the <br>
interface is displayed in is out of scope.<br>
<br>
<br>
<br>
<br>
Specifications <br>
<br>
OpenID User Interface Extension 1.0 <br>
<br>
<br>
Anticipated audience<br>
<br>
All those interested in improving OpenID Usability. <br>
<br>
<br>
Language of business<br>
<br>
English. <br>
<br>
<br>
Method of work<br>
<br>
Mailing list discussion. Posting of intermediate drafts in the OpenID <br>
Wiki. Virtual conferencing on an ad-hoc basis. <br>
<br>
<br>
Basis for completion of the activity<br>
<br>
The OpenID User Interface Extension 1.0 final draft is completed. <br>
<br>
<br>
Proposers<br>
<br>
* Allen Tom, atom at yahoo-inc.com, Yahoo!<br>
* Brian Ellin, brian at janrain.com, Janrain<br>
* David Recordon, david at sixapart.com, Six Apart<br>
* Chris Messina, chris at citizenagency.com, Vidoop/DiSo Project <br>
* Breno de Medeiros, breno at google.com, Google<br>
* Luke Shepard, lshepard at facebook.com, Facebook<br>
<br>
<br>
Initial Editors<br>
<br>
* Allen Tom, atom at yahoo-inc.com, Yahoo!<br>
* Breno de Medeiros, breno at google.com, Google<br>
<br>
Available Choices:<br>
<br>
* Approve New Working Group<br>
* Reject New Working Group<br>
* Abstain<br>
<br>
Thank you for your participation!<br>
<br>
---<br>
The OpenID Foundation<br>
<a href="http://openid.net/foundation/">http://openid.net/foundation/</a><o:p></o:p></p>
</div>
</div>
<p class=MsoNormal><o:p> </o:p></p>
</div>
</div>
</div>
<pre><o:p> </o:p></pre><pre style='text-align:center'>
<hr size=4 width="90%" align=center>
</pre><pre><o:p> </o:p></pre><pre>_______________________________________________<o:p></o:p></pre><pre>general mailing list<o:p></o:p></pre><pre><a
href="mailto:general@openid.net">general@openid.net</a><o:p></o:p></pre><pre><a
href="http://openid.net/mailman/listinfo/general">http://openid.net/mailman/listinfo/general</a><o:p></o:p></pre><pre> <o:p></o:p></pre>
<p class=MsoNormal><o:p> </o:p></p>
</div>
</div>
</body>
</html>