The URL bar does not seem to display in Safari 4. <div><br></div><div>Otherwise, I agree with most of Allen's feedback.</div><div><br></div><div>Chris<br><br><div class="gmail_quote">On Fri, Mar 20, 2009 at 1:27 PM, Allen Tom <span dir="ltr"><<a href="mailto:atom@yahoo-inc.com">atom@yahoo-inc.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div bgcolor="#ffffff" text="#000000">
Hi Max,<br>
<br>
The MySpace OpenID popup is really nice, and the address bar is
displaying for me on Firefox. The Login with MySpaceID button is
probably the most attractive CTA that I've seen to date.<br>
<br>
At the recent Facebook UX summit, there seemed to be agreement that the
best size for a popup was 450W by 500H. If OPs all used the same size
for their popups, the experience would be more consistent. <br>
<br>
You may also want to consider having the RP dim the contents the main
browser window while the popup is active to encourage the user to focus
on the popup.<br>
<br>
Another minor detail is that buttons and other clickable elements
usually use the hand cursor when the user mouses over them. The buttons
and links in the popup don't use the hand cursor.<br>
<br>
One more thing, although the password submission is sent to
<a href="https://secure.myspace.com" target="_blank">https://secure.myspace.com</a>, the popup URL isn't https. It's also not
"<a href="http://www.myspace.com" target="_blank">www.myspace.com</a>" which seems to conflict with the instructions on your
home page.<br>
<br>
Overall, awesome stuff!<br>
Allen<br>
<br>
<br>
max engel wrote:
<blockquote type="cite"><div><div></div><div class="h5">
<p><font color="navy" face="Arial" size="2">The bar shouldn't be
supressed, and it didn't happen in any of our testing. See if it
happens in firefox. I definitely planned it so the url should be
visible, and will fix any bugs.<br>
<br>
With regards to the credentials temporarily refreshing before
successful login, this is a known deficiency we are addressing, and is
because the login controller is being served inside the popup in an
iframe due to MySpace security development policies.<br>
<br>
I'll review the disclaimer language, but we wanted to keep it simple
and lightweight, and our testing confirmed this. We do have different
language for vanilla openid v. Pop-up.<br>
<br>
Definitely pass along to me any additional feedback.<br>
<br>
- Max<br>
<br>
...sent from the road</font></p>
<hr align="center" size="2" width="100%">
<font face="Tahoma" size="2"><b>From</b>:
<a href="mailto:user-experience-bounces@openid.net" target="_blank">user-experience-bounces@openid.net</a>
<br>
<b>To</b>: OpenID user experience
<br>
<b>Cc</b>: Max Engel
<br>
<b>Sent</b>: Fri Mar 20 14:21:32 2009<br>
<b>Subject</b>: Re: MySpace OpenID Popup spotted in the wild
<br>
</font>
Yeah, that was my number one concern. Hiding the URL bar is really the
WRONG way to do it (something the spec MUST address, though I doubt in
that context we can use the word MUST...).
<div><br>
</div>
<div>To see this in action, visit the test site:</div>
<div><br>
</div>
<div><a href="http://8bitmusic.jdavid.net/" target="_blank">http://8bitmusic.jdavid.net/</a></div>
<div><br>
</div>
<div>The experience with the site is extremely weird: I signed in
properly using the popup and the login page refreshed instead of
providing me some kind of "success" message. I thought I'd entered the
wrong credentials and hit cancel, but then the parent window refreshed
and showed my profile, with a bunch of my data prepopulated (without
asking me for explicit access permission):</div>
<div><br>
</div>
<div><a href="http://www.flickr.com/photos/factoryjoe/3370317843/" target="_blank">http://www.flickr.com/photos/factoryjoe/3370317843/</a></div>
<div><br>
</div>
<div>Clearly this leaves something to be desired, but now we at least
have an alternative to Facebook Connect that we can look at!</div>
<div><br>
</div>
<div>Chris<br>
<br>
<div class="gmail_quote">On Fri, Mar 20, 2009 at 11:28 AM, Allen Tom <span dir="ltr"><<a href="mailto:atom@yahoo-inc.com" target="_blank">atom@yahoo-inc.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="border-left:1px solid rgb(204, 204, 204);margin:0pt 0pt 0pt 0.8ex;padding-left:1ex">
<div bgcolor="#ffffff" text="#000000"><a href="http://www.flickr.com/photos/factoryjoe/3369029303/" target="_blank">http://www.flickr.com/photos/factoryjoe/3369029303/</a><br>
<br>
Looks really nice! My main feedback is that the browser's address bar
needs to be displayed so that users can tell if they're logging into
myspace or not.<br>
<br>
The instructions on MySpace's home page says that you shouldn't login
to this popup. :)<br>
<br>
<h3>Always make sure you're visiting the real <a href="http://myspace.com" target="_blank">myspace.com</a>!</h3>
<ol>
<li>Check the URL in your browser.</li>
<li>Make sure it begins with <a href="http://www.myspace.com/" target="_blank">http://www.myspace.com/</a></li>
<li>If ANY OTHER PAGE asks for your info, DON'T LOG IN!</li>
</ol>
<br>
<br>
</div>
<br>
_______________________________________________<br>
user-experience mailing list<br>
<a href="mailto:user-experience@openid.net" target="_blank">user-experience@openid.net</a><br>
<a href="http://openid.net/mailman/listinfo/user-experience" target="_blank">http://openid.net/mailman/listinfo/user-experience</a><br>
<br>
</blockquote>
</div>
<br>
<br clear="all">
<br>
-- <br>
Chris Messina<br>
Citizen-Participant &<br>
Open Web Advocate<br>
<br>
<a href="http://factoryjoe.com" target="_blank">factoryjoe.com</a>
// <a href="http://diso-project.org" target="_blank">diso-project.org</a>
// <a href="http://vidoop.com" target="_blank">vidoop.com</a><br>
This email is: [ ] bloggable [X] ask first [ ] private<br>
</div>
</div></div><pre><hr size="4" width="90%"><div class="im">
_______________________________________________
user-experience mailing list
<a href="mailto:user-experience@openid.net" target="_blank">user-experience@openid.net</a>
<a href="http://openid.net/mailman/listinfo/user-experience" target="_blank">http://openid.net/mailman/listinfo/user-experience</a>
</div></pre>
</blockquote>
<br>
</div>
<br>_______________________________________________<br>
user-experience mailing list<br>
<a href="mailto:user-experience@openid.net">user-experience@openid.net</a><br>
<a href="http://openid.net/mailman/listinfo/user-experience" target="_blank">http://openid.net/mailman/listinfo/user-experience</a><br>
<br></blockquote></div><br><br clear="all"><br>-- <br>Chris Messina<br>Citizen-Participant &<br> Open Web Advocate<br><br><a href="http://factoryjoe.com">factoryjoe.com</a> // <a href="http://diso-project.org">diso-project.org</a> // <a href="http://vidoop.com">vidoop.com</a><br>
This email is: [ ] bloggable [X] ask first [ ] private<br>
</div>