<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:georss="http://www.georss.org/georss" xmlns:geo="http://www.w3.org/2003/01/geo/wgs84_pos#" xmlns:media="http://search.yahoo.com/mrss/"
		>
<channel>
	<title>Comments on: Proposal: OpenID Connect</title>
	<atom:link href="http://chrissaad.wordpress.com/2008/12/08/proposal-openid-connect/feed/" rel="self" type="application/rss+xml" />
	<link>http://chrissaad.wordpress.com/2008/12/08/proposal-openid-connect/</link>
	<description>Personal Blog - Chris Saad</description>
	<lastBuildDate>Sat, 19 Dec 2009 14:19:18 +0000</lastBuildDate>
	<generator>http://wordpress.com/</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: Life on the Net: identità, profili e dati degli utenti Internet &#124; Stalkk.ed</title>
		<link>http://chrissaad.wordpress.com/2008/12/08/proposal-openid-connect/#comment-902</link>
		<dc:creator>Life on the Net: identità, profili e dati degli utenti Internet &#124; Stalkk.ed</dc:creator>
		<pubDate>Tue, 09 Dec 2008 17:22:10 +0000</pubDate>
		<guid isPermaLink="false">http://chrissaad.wordpress.com/?p=235#comment-902</guid>
		<description>[...] su OpenSocial e su alcuni open standards (OpenID, OAuth, ecc.). OpenID dovr&#224; sviluppare un OpenID Connect. MySpace intanto annuncia MySpaceID, a base OpenSocial, OAuth, OpenID, nonch&#233; Google Friend [...]</description>
		<content:encoded><![CDATA[<p>[...] su OpenSocial e su alcuni open standards (OpenID, OAuth, ecc.). OpenID dovr&agrave; sviluppare un OpenID Connect. MySpace intanto annuncia MySpaceID, a base OpenSocial, OAuth, OpenID, nonch&eacute; Google Friend [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: OpenID Connect und MySpaceID at notizBlog - a private weblog written by Matthias Pfefferle</title>
		<link>http://chrissaad.wordpress.com/2008/12/08/proposal-openid-connect/#comment-901</link>
		<dc:creator>OpenID Connect und MySpaceID at notizBlog - a private weblog written by Matthias Pfefferle</dc:creator>
		<pubDate>Tue, 09 Dec 2008 08:48:35 +0000</pubDate>
		<guid isPermaLink="false">http://chrissaad.wordpress.com/?p=235#comment-901</guid>
		<description>[...] Projekt in MySpaceID umbenannt hat ist der Name OpenID vielleicht doch gar nicht so doof&#8230;  Ob Connect oder ID (oder sonst wie), die Funktionsweise von OpenID wird durch eine Umbenennung sicherlich [...]</description>
		<content:encoded><![CDATA[<p>[...] Projekt in MySpaceID umbenannt hat ist der Name OpenID vielleicht doch gar nicht so doof&#8230;  Ob Connect oder ID (oder sonst wie), die Funktionsweise von OpenID wird durch eine Umbenennung sicherlich [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: MatHamlin.com &#187; Blog Archive &#187; links for 2008-12-08</title>
		<link>http://chrissaad.wordpress.com/2008/12/08/proposal-openid-connect/#comment-900</link>
		<dc:creator>MatHamlin.com &#187; Blog Archive &#187; links for 2008-12-08</dc:creator>
		<pubDate>Tue, 09 Dec 2008 07:01:42 +0000</pubDate>
		<guid isPermaLink="false">http://chrissaad.wordpress.com/?p=235#comment-900</guid>
		<description>[...] Proposal: OpenID Connect « Paying Attention (tags: openid identity)   Posted under Daily Links [...]</description>
		<content:encoded><![CDATA[<p>[...] Proposal: OpenID Connect « Paying Attention (tags: openid identity)   Posted under Daily Links [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Allen Tom</title>
		<link>http://chrissaad.wordpress.com/2008/12/08/proposal-openid-connect/#comment-898</link>
		<dc:creator>Allen Tom</dc:creator>
		<pubDate>Mon, 08 Dec 2008 21:00:51 +0000</pubDate>
		<guid isPermaLink="false">http://chrissaad.wordpress.com/?p=235#comment-898</guid>
		<description>One of the new features that is being explored in OpenID 2.1 will be the ability for users to Sign in with their Email address. Yahoo and a few of the other OpenID Providers have been working together on improving the user experience. Google in particular has been very generous in sharing their usability research regarding the effectiveness of having users sign into sites using their email address.</description>
		<content:encoded><![CDATA[<p>One of the new features that is being explored in OpenID 2.1 will be the ability for users to Sign in with their Email address. Yahoo and a few of the other OpenID Providers have been working together on improving the user experience. Google in particular has been very generous in sharing their usability research regarding the effectiveness of having users sign into sites using their email address.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Tom Morris</title>
		<link>http://chrissaad.wordpress.com/2008/12/08/proposal-openid-connect/#comment-897</link>
		<dc:creator>Tom Morris</dc:creator>
		<pubDate>Mon, 08 Dec 2008 13:03:58 +0000</pubDate>
		<guid isPermaLink="false">http://chrissaad.wordpress.com/?p=235#comment-897</guid>
		<description>Not a big fan of EUAT. Nothing wrong with it in principle: just the XRDS stuff which is a pain in the ass.</description>
		<content:encoded><![CDATA[<p>Not a big fan of EUAT. Nothing wrong with it in principle: just the XRDS stuff which is a pain in the ass.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Christian Scholz</title>
		<link>http://chrissaad.wordpress.com/2008/12/08/proposal-openid-connect/#comment-895</link>
		<dc:creator>Christian Scholz</dc:creator>
		<pubDate>Mon, 08 Dec 2008 10:11:38 +0000</pubDate>
		<guid isPermaLink="false">http://chrissaad.wordpress.com/?p=235#comment-895</guid>
		<description>I am really not sure if an email mapping is the best way.. I think it mainly will confuse people of what OpenID actually is. I blogged about this recently here: http://mrtopf.de/blog/web20/the-openid-branding-problem/

Then of course just OpenID is not the whole solution, what fb connect provides is maybe more comparable to OAuth with OpenSocial than OpenID (wait, wasn&#039;t OAuth/OpenSocial what Data Availability is? ;-) what&#039;s missing there is maybe a PUT on the activity stream and some better packaging).

@Luke: As for &quot;accurate names&quot;: This might be a business factor but as a user I certainly want to choose though under what identity (be it real or not) I am logging in to a site. I even might want to have different ones to choose from. 

I agree though that launch partners are very important.

The main problem with a more generic connect solution is of course what to type into that field. Not every URL is OpenID/OAuth enabled, not every email is mapped to something. Here some clever UX solution with lots of education of the user is needed and a good strategy what to do if the given term is not resolvable to a useful endpoint.</description>
		<content:encoded><![CDATA[<p>I am really not sure if an email mapping is the best way.. I think it mainly will confuse people of what OpenID actually is. I blogged about this recently here: <a href="http://mrtopf.de/blog/web20/the-openid-branding-problem/" rel="nofollow">http://mrtopf.de/blog/web20/the-openid-branding-problem/</a></p>
<p>Then of course just OpenID is not the whole solution, what fb connect provides is maybe more comparable to OAuth with OpenSocial than OpenID (wait, wasn&#8217;t OAuth/OpenSocial what Data Availability is? <img src='http://s.wordpress.com/wp-includes/images/smilies/icon_wink.gif' alt=';-)' class='wp-smiley' />  what&#8217;s missing there is maybe a PUT on the activity stream and some better packaging).</p>
<p>@Luke: As for &#8220;accurate names&#8221;: This might be a business factor but as a user I certainly want to choose though under what identity (be it real or not) I am logging in to a site. I even might want to have different ones to choose from. </p>
<p>I agree though that launch partners are very important.</p>
<p>The main problem with a more generic connect solution is of course what to type into that field. Not every URL is OpenID/OAuth enabled, not every email is mapped to something. Here some clever UX solution with lots of education of the user is needed and a good strategy what to do if the given term is not resolvable to a useful endpoint.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Kevin Marks</title>
		<link>http://chrissaad.wordpress.com/2008/12/08/proposal-openid-connect/#comment-894</link>
		<dc:creator>Kevin Marks</dc:creator>
		<pubDate>Mon, 08 Dec 2008 07:30:04 +0000</pubDate>
		<guid isPermaLink="false">http://chrissaad.wordpress.com/?p=235#comment-894</guid>
		<description>Luke, I agree - the true value of OpenID comes when the verified URLs it provides can be used to discover further endpoints to access names, profile pictures, contacts and activity streams.

We have open standards for each of these, in PortableContacts and the OpenSocial Activity Streams spec, built on existing standards such as OAuth and AtomPub - what people have been calling the Open Stack.

I hope you can convince the rest of Facebook that your users&#039; trust in your data accuracy means you have nothing to fear from interoperating via open standards, as a complement to your tightly-integrated proprietary libraries.</description>
		<content:encoded><![CDATA[<p>Luke, I agree &#8211; the true value of OpenID comes when the verified URLs it provides can be used to discover further endpoints to access names, profile pictures, contacts and activity streams.</p>
<p>We have open standards for each of these, in PortableContacts and the OpenSocial Activity Streams spec, built on existing standards such as OAuth and AtomPub &#8211; what people have been calling the Open Stack.</p>
<p>I hope you can convince the rest of Facebook that your users&#8217; trust in your data accuracy means you have nothing to fear from interoperating via open standards, as a complement to your tightly-integrated proprietary libraries.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Mike English</title>
		<link>http://chrissaad.wordpress.com/2008/12/08/proposal-openid-connect/#comment-893</link>
		<dc:creator>Mike English</dc:creator>
		<pubDate>Mon, 08 Dec 2008 07:25:36 +0000</pubDate>
		<guid isPermaLink="false">http://chrissaad.wordpress.com/?p=235#comment-893</guid>
		<description>Chris, points 1 and 2 of your summary contradict each other. While it&#039;d be great to have everyone map e-mails to OpenID URLs, that is not the status quo. OpenID Connect would not standardize the UX for OpenID.

Introducing a new UX for OpenID consumption is just going to create more confusion about what OpenID is. People may start to think that their e-mail address _is_ an OpenID after using it for OpenID Connect, and be confused when asked for a URL on other sites.

Ostensibly you&#039;d get around this by making &quot;OpenID Connect&quot; a new brand, but can we get enough people to buy in to _another_ brand right now?

I think time and energy would be better spent selling the idea of OpenID URLs to end-users. Maybe that brand is what deserves another push.</description>
		<content:encoded><![CDATA[<p>Chris, points 1 and 2 of your summary contradict each other. While it&#8217;d be great to have everyone map e-mails to OpenID URLs, that is not the status quo. OpenID Connect would not standardize the UX for OpenID.</p>
<p>Introducing a new UX for OpenID consumption is just going to create more confusion about what OpenID is. People may start to think that their e-mail address _is_ an OpenID after using it for OpenID Connect, and be confused when asked for a URL on other sites.</p>
<p>Ostensibly you&#8217;d get around this by making &#8220;OpenID Connect&#8221; a new brand, but can we get enough people to buy in to _another_ brand right now?</p>
<p>I think time and energy would be better spent selling the idea of OpenID URLs to end-users. Maybe that brand is what deserves another push.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Luke Shepard</title>
		<link>http://chrissaad.wordpress.com/2008/12/08/proposal-openid-connect/#comment-892</link>
		<dc:creator>Luke Shepard</dc:creator>
		<pubDate>Mon, 08 Dec 2008 06:54:48 +0000</pubDate>
		<guid isPermaLink="false">http://chrissaad.wordpress.com/?p=235#comment-892</guid>
		<description>I applaud the goal of this post, which is to bring the OpenID adoption and UX up to the same standard as Facebook. However, the proposed means are very top-down ... public shaming, seriously? The 99.9999% of users on the internet who don&#039;t read the blogs of the top OpenID contributors won&#039;t particularly care if they complain. If anything, the attempts at public shaming reduce the credibility of the shamers, in general.

I disagree with your statement that not having a major launch partner is not a blocker. With Facebook Connect, we considered the needs of major launch partners above all else, with the theory that if we satisfied them, then the rest would follow. The opposite is not true. If you come up with UX standards for email based verification and can&#039;t convince either Google, Yahoo, or Microsoft to comply, then they don&#039;t represent useful standards.

Finally, OpenID is just one piece of the puzzle of federated identity, and it is not an end unto itself. The best, best, best possible way to increase OpenID adoption is to increase the value of that adoption to the relying parties. Facebook Connect is valuable because Facebook has the most accurate names, accurate profile pictures and info, and a powerful distribution platform, not because it offers a standard. One easy way to provide value is to implement email verification through OpenID. The send-an-email-click-a-link loop is a big pain point for most websites; eliminating that would provide huge value and encourage adoption.

On a sidenote, RPX is a really great step towards the direction of providing usability, although it still suffers from the redirect stuff. Facebook developed some pretty intense technology to put it all in a popup and it has paid off big time in UX.</description>
		<content:encoded><![CDATA[<p>I applaud the goal of this post, which is to bring the OpenID adoption and UX up to the same standard as Facebook. However, the proposed means are very top-down &#8230; public shaming, seriously? The 99.9999% of users on the internet who don&#8217;t read the blogs of the top OpenID contributors won&#8217;t particularly care if they complain. If anything, the attempts at public shaming reduce the credibility of the shamers, in general.</p>
<p>I disagree with your statement that not having a major launch partner is not a blocker. With Facebook Connect, we considered the needs of major launch partners above all else, with the theory that if we satisfied them, then the rest would follow. The opposite is not true. If you come up with UX standards for email based verification and can&#8217;t convince either Google, Yahoo, or Microsoft to comply, then they don&#8217;t represent useful standards.</p>
<p>Finally, OpenID is just one piece of the puzzle of federated identity, and it is not an end unto itself. The best, best, best possible way to increase OpenID adoption is to increase the value of that adoption to the relying parties. Facebook Connect is valuable because Facebook has the most accurate names, accurate profile pictures and info, and a powerful distribution platform, not because it offers a standard. One easy way to provide value is to implement email verification through OpenID. The send-an-email-click-a-link loop is a big pain point for most websites; eliminating that would provide huge value and encourage adoption.</p>
<p>On a sidenote, RPX is a really great step towards the direction of providing usability, although it still suffers from the redirect stuff. Facebook developed some pretty intense technology to put it all in a popup and it has paid off big time in UX.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Hunter Niels</title>
		<link>http://chrissaad.wordpress.com/2008/12/08/proposal-openid-connect/#comment-891</link>
		<dc:creator>Hunter Niels</dc:creator>
		<pubDate>Mon, 08 Dec 2008 06:34:52 +0000</pubDate>
		<guid isPermaLink="false">http://chrissaad.wordpress.com/?p=235#comment-891</guid>
		<description>What about the JanRain implementation of RPX. It has some good ideas for UI implementation. Not quite the proposal above but an alternative.</description>
		<content:encoded><![CDATA[<p>What about the JanRain implementation of RPX. It has some good ideas for UI implementation. Not quite the proposal above but an alternative.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
