WebFinger at Google
John Panzer
jpanzer at google.com
Tue Mar 23 23:20:05 UTC 2010
A fundamental premise of Webfinger is that there are a lot of users --
today, probably the majority of the Internet -- who are comfortable with and
know their email address (or email like identifier, like a Jabber ID), who
have no interest in acquiring an HTTP identifier as well, and in fact an
extra HTTP identifier is a hindrance to them using the technology. So, the
desire to avoid the HTTP identifier in a user visible context derives from
that premise. And a login ID is definitely user visible; it's how you show
a user who they're currently logged in as, for example.
On Tue, Mar 23, 2010 at 12:39 PM, Paul E. Jones <paulej at packetizer.com>wrote:
> John,
>
>
>
> Note that this means the user would not be logged in as bob at gmail.com, but
> instead as https://www.google.com/profiles/3234234234234234. (Since step
> 6 doesn't know anything about steps 1-5.) I think this has obvious
> usability issues.
>
>
>
> Note that the OP cannot return acct:bob at gmail.com <acct%3Abob at gmail.com>as the claimed_id because the claimed_id has to be an openid, and under this
> proposal acct:bob at gmail.com <acct%3Abob at gmail.com> isn't an OpenID. So
> the RP _might_ be able to retain both the entered (pre-normalized)
> identifier and the final claimed_id, and display the former to the user and
> the user's friends, but it seems complicated and unwieldy.
>
>
>
> I’m not really sure what to do about the fact that the *real* OpenID
> identifier is something nearly impossible to remember. Perhaps one might
> argue that “that’s not the way it’s supposed to be.” :-) Shouldn’t the
> OpenID ID’s – even as HTTP(S) URIs – still be somewhat memorable? That said,
> does it really matter? If the user always logs in with an email ID that is
> converted using Webfinger into the real OpenID ID, the process is always the
> same.
>
>
>
> I would strongly suggest not trying to hide the OpenID ID or make it hard
> to remember. Why not https://openid.google.com/bob? That’s likely easier
> to remember. So, is your concern with the user having to potentially
> remember two IDs, or the fact that one is impossible to remember? :-)
>
>
>
> Paul
>
>
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs/attachments/20100323/ccc63ee2/attachment.htm>
More information about the specs
mailing list