We want your OpenID Ideas! Think you’ve come up with a way to improve OpenID? Recognize a good idea when you see one? We want to hear from you!
I'd like to link somewhere to explain openid (from my applications that support openid sign in), and it seems like openid.net would be the logical place.
But at openid.net, there is no clear, newbie-friendly explanation of how it actually works. I click "What is openID" and I get a whole page of text... that doesn't really answer my question.
I think we need another link at the top... like, "How does it work" maybe?
http://openidexplained.com is closer, but it looks a little embarrassing somehow.
Alot of websites that support OpenID do not use SSL (https://), instead they only have the unsecured http://. My idea is, work with the existing and also new OpenID supported websites and encourage them to setup an https:// version of their website. For example, facebook's url could be https://www.facebook.com. The websites don't have to use https as their default url because SSL is a bit slower. But by having an SSL option it will mean OpenID users will have their info encrypted and it lowers the security risks with OpenID.
That’s a great idea. It’s certainly something that OPs and RPs should take into consideration.
There is currently some conversations going on about an OpenID Security Best Practices document; while the spec shouldn’t mandate SSL, it certainly should present the case for supporting it, ideally in a best practices doc.
I was exploring the features and benefits of the "Intense Debate" plugin for Wordpress, and was prompted to sign into Open ID by providing my Open ID URL.
I have a Google Account, but have never been directly asked for my Open ID account. This lead me to the Open ID website, at which point I thought the information would be clearly indicated on the "Get an Open ID" or "start using your Open ID" page. Instead, it was a bunch irrelevant information about how I already have an account, with links to useless links like Google and Yahoo's landing page.
The answer to the question, "where do I get an Open ID URL" for basic login is unfortunately difficult to find on the current website, if it's even there (I have yet to find it).
If Open ID is to succeed in achieving mass adoption, surely the basics like providing a website that provides basic information like how to obtain an account and sign in are of the utmost importance. I consider myself to be quite computer literate and I'm frustrated beyond belief, so I can just imagine what a non starter this would be for incorporating into a website and asking people like my parents to try and obtain this new account and throw them in a complete loop trying to figure out where they go to get it.
Thanks.
I was exploring the features and benefits of the "Intense Debate" plugin for Wordpress, and was prompted to sign into Open ID by providing my Open ID URL.
I have a Google Account, but have never been directly asked for my Open ID account. This lead me to the Open ID website, at which point I thought the information would be clearly indicated on the "Get an Open ID" or "start using your Open ID" page. Instead, it was a bunch irrelevant information about how I already have an account, with links to useless links like Google and Yahoo's landing… more
This is a fair criticism and something that we want to address as we continue to make improvements to our newly relaunched website. It has a long way to go still, and this kind of feedback is very helpful in directing our attention. Thanks — and sorry to hear about your frustration.
Translations are needed so that users from other countries can understand what OpenID is.
In order to help new users understand the OpenID system the following would be useful.
Every visitor to openid.net, or the "how OpenID works" page should be given a test run account, such as demo92344.openid.net
This account could be active for 24 hours and no password would be required. Instead the user would be presented with a page that explained this is a test account and that normally they would use a password at this step.
During each login with this temporary OpenID users would be shown a list of permanent ID providers to use.
I'd appretiate if OpenID.net could offer a test page for OPs. I'm currently setting up an OpenID server and there was a test service offered by Jan Rain which is now done for something felt like ages.
So a page where you could test the OpenID you offer with test cases for all the situations which can appear telling you what's ok and what's wrong.
I have more than one OpenID. Some of the data is common across the OpenID providers, but some is different. Is there a way to merge the data from multiple OpenID accounts into one master account?
There’s nothing in the OpenID protocol that would really allow this, especially from the data side of things. Unlike, say, credit cards, where you can transfer your balance between different providers, data transfer between different OPs requires a bit more leg work.
What kind of data are you talking about?
Instead of identifying myself with:
http://example.net/john-doe
I would prefer:
john-doe@example.net
We could have a standard approach where identifier@domain translates to http://domain/identifier
I think it would give OpenID more human friendly feel than using URL format.
This would be an open and distributed reputation management system that keeps track of a user's reputation throughout the many websites that make up the world wide web.
OpenID provided us with an open and distributed authentication system, but this is where it stops.
I believe that OpenRep is the missing layer between this and the many other 'Social Web' platforms that exist out there (blogs, social networks, e-retailers such as Amazon and Ebay).
When a user posts a blog, comments on another user's blog, reviews a product or service, attempts to sell an item on Ebay, tries to purchase an item on Ebay, Requests to add a friend on Facebook, or performs many of the other 'social' interactions available on the WWW, their reputation has the potential to play a role in how others perceive that interaction and how much of a 'weight' it may carry.
We therefore need a means of tracking this reputation between websites.
Data (ratings, comments and the 'semantic categories' to which they relate) would be collected against each user profile, as they currently are to some extent on existing websites like Amazon and Ebay.
This data would be synchronized with that user's OpenRep account (which would be linked to their OpenID account and referenced also by URI). This data would then become available to the other websites that they login to with their OpenID login.
OpenRep servers would be Open-source and anyone would be able to establish an OpenRep provider. The 'industry' of providers would be self-regulated in that the servers would provide a means for that Provider to link to and rate all the other's reputations, with the combination of these ratings also being stored on each server.
This would keep out 'pirate' OpenRep servers as the 'savvy' user would verify the 'OpenRep' of someone's blog via an alternate OpenRep provider, and this would happen automatically with websites that provide OpenRep to their users.
For anyone who's interested I wrote about something similar to this in my blog after reading an article in Scientific American on "Science 2.0":
This would be an open and distributed reputation management system that keeps track of a user's reputation throughout the many websites that make up the world wide web.
OpenID provided us with an open and distributed authentication system, but this is where it stops.
I believe that OpenRep is the missing layer between this and the many other 'Social Web' platforms that exist out there (blogs, social networks, e-retailers such as Amazon and Ebay).
When a user posts a blog, comments on another user's blog, reviews a product or service, attempts to sell an item on Ebay, tries to purchase… more
I very like to growing OpenID.net indirectly, so I recommend to the OpenID.net Administrators to give the free register for individuals. So, not just me who need it, but there are still many others who need it.
The JanRain library is way to overcomplicated and obfuscated to easily implement into a website. I found myself extremely confused as to what the library was doing or how OpenID really worked behind the scenes. It'd be great if this was a lot simpler, and there were some example documents (as in the result of what a website should return) showing different situations and how those translate into documents. Flowcharts could also be created to explain exactly the process of an OpenID login (not just from a basic viewpoint, but the actual HTTP calls that are made).
As an example, I've registered with google gmail, so I have an OpenId account from google. Let say I want a Yahoo email account, and I want to use my OpenId from gmail, well I don't see any option for that from yahoo.
Some providers give the option to use existing OpenID but hidden in very small print. Competition I guess.
All these defeat the simplicity mention by openid in the first place.
Surprise! I may already have an OpenID... but have no way to use it that I can fathom from your instructions. "How do I log in with OpenID?" says I'll see just one thing to fill in... but I see two. And then I get shunted to a "go login somewhere else" notice... and none of this crazy stuff works.
I'm a web expert, so this is epic fail. And have already given this 10x the attention I would normally before just running away.
If a person establishes an OpenID from a provider, it's hard to know if it is working. Finding sites that use OpenID is not trivial.
Open Id is a great concept and I like to use it in day to day life but security is a critical issue here. I think password is not enough to protection We need two way authentication system which is free to everyone and easy to deploy in servers.
For that We can create a software that we need to install it to the USB flash drive and whenever we need to login we have to use that USB drive which having a software which will authenticate the process Its like a debit card that we using in ATM where we need the debit card and password to access the ATM so without the combination its impossible to use ATM same idea we can implement for websites.
The bright side is that it can be a free technology that all user can use. Mostly everybody use portebal USB drives to carry their data, same USB drive can be used for the process.
For software, developers can create a portable and secured application which contains info cards, digital certificates , email certificates, Spl digital certificate that can be used for particular software download and USB so if any user copy the software to other USB drive then the old certificate will don't work fot that USB drive so by this we can create a solid security layer
Open Id is a great concept and I like to use it in day to day life but security is a critical issue here. I think password is not enough to protection We need two way authentication system which is free to everyone and easy to deploy in servers.
For that We can create a software that we need to install it to the USB flash drive and whenever we need to login we have to use that USB drive which having a software which will authenticate the process Its like a debit card that we using in ATM where… more
Currently, one’s email address is considered as the center of his online identity, only lesser number of websites use OpenID. On the other hand, even OpenID hasn’t recognized what are it’s potentials. ...
http://blog.budhajeewa.com/ones-openid-should-be-a-mirror-reflecting-his-online-life/
(This is not a spam, just the link to my original blog post!)
The OpenId.net, only in English, not is soooo open. To have a real global range it's need to be translated for many others languages.

You are viewing a mobilized version of this site...
View original page here