Simon Willison’s Weblog


Thursday, 17th January 2008

Yahoo! Announces Support for OpenID. Here’s the official press release: “Yahoo! Support Triples Number of OpenID Accounts to 368 million”. Directed identity gets a mention; it’s going to be enabled for and The public beta starts on January 30th.

# 2:29 pm / directedidentity, flickr, openid, yahoo

A Yahoo! ID is one of the most recognizable and useful accounts to have on the Internet and with our support of OpenID, it will become even more powerful. Supporting OpenID gives our users the freedom to leverage their Yahoo! ID both on and off the Yahoo! network, reducing the number of usernames and passwords they need to remember and offering a single, trusted partner for managing their online identity.

Ash Patel

# 2:31 pm / ash-patel, openid, yahoo Yahoo!’s human readable guide to OpenID, complete with tour. It looks like they’re relying on the “sign-in seal” to protect against phishing.

# 2:35 pm / openid, phishing, security, signinseal, yahoo

Automate firing of onload events. Paul Irish suggests setting up your site’s onload handlers in a single external JavaScript file then executing different handlers depending on the body element’s id attribute.

# 4:08 pm / javascript, onload, paul-irish

8 More Design Mistakes with Account Sign-in (via) Second of a two part series by Jared Spool. I agree with all of them with the possible exception of #15 which advocates providing a non-email password recovery solution. Security “questions” are usually dreadfully insecure, and introduce the need to lock users out of their accounts after just a few tries.

# 4:35 pm / jared-spool, registration, security, signin, usability

.aspx considered harmful. Jon Udell: “I guess I’m extra-sensitive to the .aspx thing now that I work for Microsoft, because I know that to folks outside the Microsoft ecosystem it screams: We don’t get the web.”—he goes on to mention that smart URL rewriting is thankfully built in to the upcoming ASP.NET MVC framework.

# 6:01 pm / aspnet, aspx, jon-udell, microsoft, mvc, urls

Oh, and before anyone jumps on me about this not being "full" (meaning bi-directional) OpenID support, I'm quite aware of that. Consuming OpenID is a different beast that can't happen overnight. Give it some time. I'm optimistic that we'll get there.

Jeremy Zawodny

# 7:05 pm / jeremy-zawodny, openid, yahoo

Canon EOS Beginners’ FAQ. A really good, detailed FAQ; I just picked up a Canon EOS 400D (aka Digital Rebel XTi) and I’m figuring out what I can do with it. It looks like I’ll need something better than the kit lens for wildlife photography.

# 7:59 pm / canon, digitalrebelxti, eos, eos400d, faq, photography