MySpace OpenID Popup spotted in the wild

Johannes Ernst jernst+openid.net at netmesh.us
Fri May 1 18:20:42 UTC 2009


I've been trying to convince the VeriSign guys for some time to open- 
source Seatbelt, but so far I have failed ...

Would you say that all we'd need/want the browser guys to do is ship  
Seatbelt-like functionality?


On May 1, 2009, at 10:47, Brendan O'Connor wrote:

> On Fri, May 1, 2009 at 1:35 PM, Johannes Ernst
> <jernst+openid.net at netmesh.us> wrote:
>
>> If we could get the browser developers to add anything we wanted to  
>> their
>> browsers, what *exactly* would we want them to implement?
>> This is not outlandish. The Mozilla folks asked repeatedly in the  
>> past (and
>> we never knew what to say in response) and the security of a  
>> billion OpenIDs
>> is not a set of user requirements that's easily dismissed either.
>> It appears that it would be some kind of user interface element  
>> (think
>> "popup" for a minute) that could display the OP's authentication  
>> ceremony.
>> But where the browser would somehow "certify" that it was not a  
>> phishing
>> attempt and came from one of the user's trusted OPs. In a way that  
>> is better
>> than having the user to do a string compare on the URL shown in the  
>> address
>> bar.
>> What would such a user interface element look like? That's not  
>> limited to
>> what we can do without cooperation from the browser guys.
>> In Firefox, it could be sitting in the side bar for example. (where  
>> the
>> bookmarks are) Or ...?
>
> Why not Seatbelt? I mean, naturally, a reimplemented version, but it
> seems to solve the UI/UX issues pretty nicely. It just sits quietly
> down in my status bar, and only pops up if I try to log in somewhere--
> and it always displays my current logged in / logged out status. And
> it can be configured for any OP.
>
> <https://addons.mozilla.org/en-US/firefox/addon/5133>
>
> ---Brendan O'Connor
> _______________________________________________
> user-experience mailing list
> user-experience at openid.net
> http://openid.net/mailman/listinfo/user-experience



Johannes Ernst
NetMesh Inc.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: lid.gif
Type: image/gif
Size: 977 bytes
Desc: not available
URL: <http://lists.openid.net/pipermail/openid-user-experience/attachments/20090501/2fe7fbdf/attachment-0004.gif>
-------------- next part --------------
  
-------------- next part --------------
A non-text attachment was scrubbed...
Name: openid.gif
Type: image/gif
Size: 903 bytes
Desc: not available
URL: <http://lists.openid.net/pipermail/openid-user-experience/attachments/20090501/2fe7fbdf/attachment-0005.gif>
-------------- next part --------------
  http://netmesh.info/jernst





More information about the user-experience mailing list