<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: OpenID Needs to Start Getting Real</title>
	<atom:link href="http://www.sitepoint.com/blogs/2008/12/30/openid-needs-to-start-getting-real/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.sitepoint.com/blogs/2008/12/30/openid-needs-to-start-getting-real/</link>
	<description>News, opinion, and fresh thinking for web developers and designers. The official podcast of sitepoint.com.</description>
	<lastBuildDate>Sun, 08 Nov 2009 18:39:36 -0500</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.4</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: RaBu</title>
		<link>http://www.sitepoint.com/blogs/2008/12/30/openid-needs-to-start-getting-real/comment-page-1/#comment-870091</link>
		<dc:creator>RaBu</dc:creator>
		<pubDate>Thu, 29 Jan 2009 08:39:16 +0000</pubDate>
		<guid isPermaLink="false">http://www.sitepoint.com/blogs/?p=3568#comment-870091</guid>
		<description>As I see it, Facebook connect is just a rework of Becon - where they have put something on top, to take the focus away from the hidden marketing part! The users don&#039;t think of that when the see that they &quot;just are able to login with facebook&quot;.

People are bragging at Google for too much tracking, saving their cookies for to long and in general being big-brother, I think this scenario is worse... but that&#039;s just my opint of view!

Oh, and by the way Josh - OpenID is not a &quot;company&quot; it&#039;s community driven and build on a open-source idea, so it&#039;s also your responsibility to take action and contribute in case you think there is something wrong or something could be done better.</description>
		<content:encoded><![CDATA[<p>As I see it, Facebook connect is just a rework of Becon &#8211; where they have put something on top, to take the focus away from the hidden marketing part! The users don&#8217;t think of that when the see that they &#8220;just are able to login with facebook&#8221;.</p>
<p>People are bragging at Google for too much tracking, saving their cookies for to long and in general being big-brother, I think this scenario is worse&#8230; but that&#8217;s just my opint of view!</p>
<p>Oh, and by the way Josh &#8211; OpenID is not a &#8220;company&#8221; it&#8217;s community driven and build on a open-source idea, so it&#8217;s also your responsibility to take action and contribute in case you think there is something wrong or something could be done better.</p>]]></content:encoded>
	</item>
	<item>
		<title>By: Huyng</title>
		<link>http://www.sitepoint.com/blogs/2008/12/30/openid-needs-to-start-getting-real/comment-page-1/#comment-860255</link>
		<dc:creator>Huyng</dc:creator>
		<pubDate>Sun, 11 Jan 2009 07:37:48 +0000</pubDate>
		<guid isPermaLink="false">http://www.sitepoint.com/blogs/?p=3568#comment-860255</guid>
		<description>I agree with what spigot said above... I like the fact that openid service providers such as myopenid.com provide authentication without any implicit linking to your highly personal gmail or facebook accounts. 

This article makes a good point about focusing on marketing. I just wrote a post on how the OpenID movement could explain its concept &lt;a href=&quot;http://www.huyng.com/?p=34&quot; rel=&quot;nofollow&quot;&gt;better&lt;/a&gt;</description>
		<content:encoded><![CDATA[<p>I agree with what spigot said above&#8230; I like the fact that openid service providers such as myopenid.com provide authentication without any implicit linking to your highly personal gmail or facebook accounts. </p>
<p>This article makes a good point about focusing on marketing. I just wrote a post on how the OpenID movement could explain its concept <a href="http://www.huyng.com/?p=34" rel="nofollow">better</a></p>]]></content:encoded>
	</item>
	<item>
		<title>By: Chris Messina</title>
		<link>http://www.sitepoint.com/blogs/2008/12/30/openid-needs-to-start-getting-real/comment-page-1/#comment-857497</link>
		<dc:creator>Chris Messina</dc:creator>
		<pubDate>Sun, 04 Jan 2009 22:09:14 +0000</pubDate>
		<guid isPermaLink="false">http://www.sitepoint.com/blogs/?p=3568#comment-857497</guid>
		<description>Just a few points.

First, I wrote about the &quot;eggs in one basket&quot; argument against OpenID here:

&lt;a href=&quot;http://factoryjoe.com/blog/2008/12/26/responding-to-criticisms-about-openid/&quot; rel=&quot;nofollow&quot;&gt;http://factoryjoe.com/blog/2008/12/26/responding-to-criticisms-about-openid/&lt;/a&gt;

If you use one email address for signing up for new services, OpenID is no worse for you (in fact, it could be better, since OpenID works over secure connections, whereas email doesn&#039;t always).

Second, with regards to URLs as usernames -- email addresses already play that role, and we&#039;re working to enable email addresses as OpenIDs in OpenID 2.1. I think with MySpace, we&#039;re going to see people finally able to think of identifying themselves by URLs. For now, for a lot of folks, it&#039;s probably awkward, but eventually I think people will be able to tell someone else that they are &quot;factoryjoe&quot; on twitter.com -- and voila, they&#039;re using URLs to identify themselves.

Third, OpenID won&#039;t just be about logins in the future. It&#039;ll be the way that you point to your data across web services, like people do with their c:\ drives today. What do you do when you have photos on Flickr, videos on YouTube, friends on MySpace, posts on Tumblr and Twitter and you want to access them on some new service? Do you really want to specify each of those accounts individually? Using a technology called &quot;Discovery&quot; on your OpenID, you can point to all of them -- and choose who gets to see what data.

It&#039;s a little ways off still, but I think if you look out far enough, you can start to see how useful OpenID will become.</description>
		<content:encoded><![CDATA[<p>Just a few points.</p>
<p>First, I wrote about the &#8220;eggs in one basket&#8221; argument against OpenID here:</p>
<p><a href="http://factoryjoe.com/blog/2008/12/26/responding-to-criticisms-about-openid/" rel="nofollow">http://factoryjoe.com/blog/2008/12/26/responding-to-criticisms-about-openid/</a></p>
<p>If you use one email address for signing up for new services, OpenID is no worse for you (in fact, it could be better, since OpenID works over secure connections, whereas email doesn&#8217;t always).</p>
<p>Second, with regards to URLs as usernames &#8212; email addresses already play that role, and we&#8217;re working to enable email addresses as OpenIDs in OpenID 2.1. I think with MySpace, we&#8217;re going to see people finally able to think of identifying themselves by URLs. For now, for a lot of folks, it&#8217;s probably awkward, but eventually I think people will be able to tell someone else that they are &#8220;factoryjoe&#8221; on twitter.com &#8212; and voila, they&#8217;re using URLs to identify themselves.</p>
<p>Third, OpenID won&#8217;t just be about logins in the future. It&#8217;ll be the way that you point to your data across web services, like people do with their c:\ drives today. What do you do when you have photos on Flickr, videos on YouTube, friends on MySpace, posts on Tumblr and Twitter and you want to access them on some new service? Do you really want to specify each of those accounts individually? Using a technology called &#8220;Discovery&#8221; on your OpenID, you can point to all of them &#8212; and choose who gets to see what data.</p>
<p>It&#8217;s a little ways off still, but I think if you look out far enough, you can start to see how useful OpenID will become.</p>]]></content:encoded>
	</item>
	<item>
		<title>By: graphicmist</title>
		<link>http://www.sitepoint.com/blogs/2008/12/30/openid-needs-to-start-getting-real/comment-page-1/#comment-856943</link>
		<dc:creator>graphicmist</dc:creator>
		<pubDate>Fri, 02 Jan 2009 17:35:01 +0000</pubDate>
		<guid isPermaLink="false">http://www.sitepoint.com/blogs/?p=3568#comment-856943</guid>
		<description>Yes i agree with raena and yahoo also generates your a random very long open id ...i think due to security purpose...</description>
		<content:encoded><![CDATA[<p>Yes i agree with raena and yahoo also generates your a random very long open id &#8230;i think due to security purpose&#8230;</p>]]></content:encoded>
	</item>
	<item>
		<title>By: raena</title>
		<link>http://www.sitepoint.com/blogs/2008/12/30/openid-needs-to-start-getting-real/comment-page-1/#comment-856915</link>
		<dc:creator>raena</dc:creator>
		<pubDate>Fri, 02 Jan 2009 13:57:13 +0000</pubDate>
		<guid isPermaLink="false">http://www.sitepoint.com/blogs/?p=3568#comment-856915</guid>
		<description>&lt;blockquote&gt; OpenId is fundamentally broken because it requires URLs as usernames. &lt;/blockquote&gt;

But you don&#039;t have to &lt;strong&gt;show&lt;/strong&gt; people that. Yahoo are doing this really well -- if you&#039;re using Yahoo as an OpenID server, you *could* enter an OpenID, but you don&#039;t have to. You can just enter yahoo.com.</description>
		<content:encoded><![CDATA[<blockquote><p> OpenId is fundamentally broken because it requires URLs as usernames. </p></blockquote>
<p>But you don&#8217;t have to <strong>show</strong> people that. Yahoo are doing this really well &#8212; if you&#8217;re using Yahoo as an OpenID server, you *could* enter an OpenID, but you don&#8217;t have to. You can just enter yahoo.com.</p>]]></content:encoded>
	</item>
	<item>
		<title>By: roosevelt</title>
		<link>http://www.sitepoint.com/blogs/2008/12/30/openid-needs-to-start-getting-real/comment-page-1/#comment-856392</link>
		<dc:creator>roosevelt</dc:creator>
		<pubDate>Wed, 31 Dec 2008 22:12:33 +0000</pubDate>
		<guid isPermaLink="false">http://www.sitepoint.com/blogs/?p=3568#comment-856392</guid>
		<description>I have to agree with graphicmist on this, it certainly is a big risk. 

It&#039;s one of the reasons why I am not using OpenID myself, even though I acknowledge its benefits. 

What if someone from OpenID itself hacks into my account and gets access to some other membership websites?

Perhaps, it&#039;s the reasons why OpenID is still taking time testing and figuring out solutions for the worst case scenarios.</description>
		<content:encoded><![CDATA[<p>I have to agree with graphicmist on this, it certainly is a big risk. </p>
<p>It&#8217;s one of the reasons why I am not using OpenID myself, even though I acknowledge its benefits. </p>
<p>What if someone from OpenID itself hacks into my account and gets access to some other membership websites?</p>
<p>Perhaps, it&#8217;s the reasons why OpenID is still taking time testing and figuring out solutions for the worst case scenarios.</p>]]></content:encoded>
	</item>
	<item>
		<title>By: graphicmist</title>
		<link>http://www.sitepoint.com/blogs/2008/12/30/openid-needs-to-start-getting-real/comment-page-1/#comment-856376</link>
		<dc:creator>graphicmist</dc:creator>
		<pubDate>Wed, 31 Dec 2008 20:33:01 +0000</pubDate>
		<guid isPermaLink="false">http://www.sitepoint.com/blogs/?p=3568#comment-856376</guid>
		<description>&lt;code&gt;If for whatever reason a person gets their login compromised then they get their login for multiple sites compromised in one hit, at least with separate logins for each site, only the login for a particular site would get compromised.
&lt;/code&gt;

Does anyone know what are the developers of openid doing for it?? Its really a big issue....</description>
		<content:encoded><![CDATA[<code>If for whatever reason a person gets their login compromised then they get their login for multiple sites compromised in one hit, at least with separate logins for each site, only the login for a particular site would get compromised.
</code>
<p>Does anyone know what are the developers of openid doing for it?? Its really a big issue&#8230;.</p>]]></content:encoded>
	</item>
	<item>
		<title>By: SpacePhoenix</title>
		<link>http://www.sitepoint.com/blogs/2008/12/30/openid-needs-to-start-getting-real/comment-page-1/#comment-856352</link>
		<dc:creator>SpacePhoenix</dc:creator>
		<pubDate>Wed, 31 Dec 2008 19:20:15 +0000</pubDate>
		<guid isPermaLink="false">http://www.sitepoint.com/blogs/?p=3568#comment-856352</guid>
		<description>I personally would never trust any system for allowing login-in to many websites by one login. If for whatever reason a person gets their login compromised then they get their login for multiple sites compromised in one hit, at least with separate logins for each site, only the login for a particular site would get compromised.</description>
		<content:encoded><![CDATA[<p>I personally would never trust any system for allowing login-in to many websites by one login. If for whatever reason a person gets their login compromised then they get their login for multiple sites compromised in one hit, at least with separate logins for each site, only the login for a particular site would get compromised.</p>]]></content:encoded>
	</item>
	<item>
		<title>By: graphicmist</title>
		<link>http://www.sitepoint.com/blogs/2008/12/30/openid-needs-to-start-getting-real/comment-page-1/#comment-856314</link>
		<dc:creator>graphicmist</dc:creator>
		<pubDate>Wed, 31 Dec 2008 16:54:02 +0000</pubDate>
		<guid isPermaLink="false">http://www.sitepoint.com/blogs/?p=3568#comment-856314</guid>
		<description>&lt;code&gt;doesn’t enable a unified registration and login experience across all the possible accounts that site visitors may have when they show up at a given website.&lt;/code&gt;

@brian what do u mean bu unified registration and login experience.??</description>
		<content:encoded><![CDATA[<code>doesn’t enable a unified registration and login experience across all the possible accounts that site visitors may have when they show up at a given website.</code>
<p>@brian what do u mean bu unified registration and login experience.??</p>]]></content:encoded>
	</item>
	<item>
		<title>By: Dimitris</title>
		<link>http://www.sitepoint.com/blogs/2008/12/30/openid-needs-to-start-getting-real/comment-page-1/#comment-856116</link>
		<dc:creator>Dimitris</dc:creator>
		<pubDate>Wed, 31 Dec 2008 00:07:21 +0000</pubDate>
		<guid isPermaLink="false">http://www.sitepoint.com/blogs/?p=3568#comment-856116</guid>
		<description>OpenId is &lt;em&gt;fundamentally&lt;/em&gt; broken because it requires URLs as usernames. Try to explain to not technical people that their user name should be http://averagejoe.com or worse http://openidprovider.com/averagejoe instead of plain &quot;averagejoe&quot;. It will never work that way. 

&lt;em&gt;A name should be a name and nothing more&lt;/em&gt;! Even I can not justify why my name needs to have a networking protocol scheme and a dns name and possibly a tcp port in it.</description>
		<content:encoded><![CDATA[<p>OpenId is <em>fundamentally</em> broken because it requires URLs as usernames. Try to explain to not technical people that their user name should be <a href="http://averagejoe.com" rel="nofollow">http://averagejoe.com</a> or worse <a href="http://openidprovider.com/averagejoe" rel="nofollow">http://openidprovider.com/averagejoe</a> instead of plain &#8220;averagejoe&#8221;. It will never work that way. </p>
<p><em>A name should be a name and nothing more</em>! Even I can not justify why my name needs to have a networking protocol scheme and a dns name and possibly a tcp port in it.</p>]]></content:encoded>
	</item>
</channel>
</rss>
