Simon Willison’s Weblog

Subscribe

213 items tagged “openid”

2007

Despite it being a best practice, currently only a handful of OpenID Consumer sites support the association of multiple OpenID identifiers to a single “account”. This is important to create redundancy to make the loss of an identifier less catastrophic.

Martin Atkins # 28th February 2007, 9:56 pm

OpenID and microformats support on XTech site. “A single-sign on solution like OpenID solves an important problem for us, as most people tend to interact with our conference web sites in only one or two time periods each year.” # 27th February 2007, 12:46 pm

The No-Shit Guide To Supporting OpenID In Your Applications. Fantastically useful: Dan Webb digs through the API documentation so you don’t have to. The example code is for Rails but the PHP and Python libraries work in much the same way. # 27th February 2007, 1:56 am

OpenID makes web identities real and appealing. DHH has caught the OpenID bug. Expect to see a flurry of activity around OpenID in the Rails community over the next few weeks. # 26th February 2007, 10:31 am

More on Decentralised Social Networking. Martin Atkins has been thinking hard about the practicalities of building decentralised social networking on top of OpenID. # 26th February 2007, 10:15 am

Six cool things you can build with OpenID

I’ve posted the slides from my Future of Web Apps talk on OpenID, minus the demo videos. I’m planning to put together a video that combines the slides, demos and audio once the official podcasts have been published.

[... 816 words]

prooveme.com. An OpenID provider that uses SSL client certificates (which you install in your browser) for authentication. # 22nd February 2007, 12:01 pm

OpenID at the Future of Web Apps

People seemed to really like my talk—they even laughed in the right places! I’ll be posting full notes, slides and writing an article for Vitamin over the next few days. For the moment I’m just enjoying coming down from the adrenaline high.

[... 84 words]

OpenID is particularly appealing to OLPC, because it can be used to perpetuate passwordless access even on sites that normally require authentication [...] With an OpenID provider service running on the school server (or other trusted servers), logins to OpenID-enabled sites will simply succeed transparently, because the child’s machine has been authenticated in the background

Ivan Krstić # 17th February 2007, 12:42 am

We don’t yet accept OpenID identities within our products as a relying party, but we’re actively working on it. That roll-out is likely to be gradual.

John Panzer, AOL # 15th February 2007, 11:33 am

AOL and OpenID. http://openid.aol.com/your-screenname now works as an OpenID, for every AOL user. Wow. # 15th February 2007, 11:27 am

PHP and “OpenID authentication failed: Bad signature”. If you’re seeing a “Bad signature” error in your PHP OpenID application it could be down to a miscompiled GMP library. # 15th February 2007, 10:02 am

FreeYourID.com. A free .name domain for 90 days, with built-in tools for managing e-mail forwarding and your OpenID. Could do with some unobtrusive JavaScript, but they’re really fast at responding to suggestions. # 13th February 2007, 4:26 pm

Too many Chiefs... OpenID’s current biggest problem is that there are plenty of OpenID providers but not nearly enough places that you can log in to with one. # 13th February 2007, 11:49 am

Speaking at the Future of Web Apps

Just a quick update to say that I’ll be speaking at the Future of Web Apps conference in London on February the 21st, talking about OpenID. I really enjoyed last year’s event and feel honored to be included in such an exciting schedule.

[... 86 words]

OpenID (and TypeKey) using native OpenSSL functions in PHP. Wez Furlong shows how a small patch to PHP’s OpenSSL support makes it a whole lot easier to perform the cryptography behind OpenID (at the moment you need to use the bc or gmp modules). # 10th February 2007, 10:49 pm

Hanselminutes Podcast on OpenID. Good podcast discussion on OpenID, from a .NET developer’s perspective. # 9th February 2007, 9:19 am

The OpenID Directory. A new directory of OpenID consumers and providers. If they can make sure that the listed sites actually let you log in this could become a really valuable resource. # 9th February 2007, 12:19 am

CardSpace & OpenID: Working together. A more detailed explanation of what the Microsoft OpenID collaboration actually means. # 7th February 2007, 1:58 am

Microsoft & OpenID. HUGE news. Microsoft are officially supporting OpenID, through integration with CardSpace. # 7th February 2007, 1:56 am

SMTP Service Extension for Yadis Discovery. Could potentially let you use your e-mail address as an OpenID, although personally I wouldn’t always want to hand my address over to third-party sites. # 5th February 2007, 9:44 am

Announcing Jyte. “Jyte is a simple service that allows you to associate claims, credibility and contacts to build a reputation with your OpenID”. The OpenID landscape is wide open for innovation like this. # 31st January 2007, 6:04 pm

XRID.net (via) Sign up for a free @xrid*something i-name by logging in with an OpenID. # 29th January 2007, 4:55 am

idproxy.net: Use your Yahoo! account as an OpenID

In an ideal world, some or all of the sites with large user databases (Yahoo!, AOL, Google, Amazon and so on) would act as OpenID providers, allowing their users to sign in to OpenID supporting sites around the Web. Until that happens, people who want to use OpenID need to sign up for Yet Another Account to do so.

[... 414 words]

OpenID Enabled: OpenID Tests. Useful for checking if your OpenID consumer or server are working OK. # 27th January 2007, 10:34 am

Justin Mason: more on social whitelisting with OpenID. The author of spam assassin warns that whitelist-based trust networks are a lot harder than they look. # 26th January 2007, 1:02 am

Social whitelisting with OpenID... (plasticbag.org). Tom’s write-up of the social whitelisting idea. Lots of sceptics in the comments. # 26th January 2007, 1 am

MyOpenID: New anti-phishing tools available. Includes SafeSignIn, which removes the login form from the landing page. You have to enable it in your preferences though. # 24th January 2007, 3:02 pm

We have a unique opportunity with phishing and OpenID. OpenID can make the possibility for bad things to happen from phishing that much worse. However, having an OpenID means you create a more intimate relationship with your OpenID provider. You go there everyday. You will more likely know when something is wrong.

Scott Kveton # 24th January 2007, 3:02 pm

Oxford Geek Nights. 8pm on the 7th of February 2007 at the Jericho Tavern in Oxford. Three 15 minute talks and a bunch of 5 minute microslots. I’ll be giving a talk on OpenID. # 22nd January 2007, 7:22 pm