Hacker News Reader

Comment by mahmud | Hacker News Reader

Please upvote to give the standards more exposure.

Yahoo, Google and MySpace are supporting the spanking new OpenID OAuth Extension protocol. I have this on my plate at this exact moment, I am not sure how long it will take them to support this, but for now, I found Yahoo's Contacts API to be the easiest, and Facebook's Registration/SSO to be the hardest.

This is what my todo list looks like:

1) Visit all these websites: http://knowem.com/

2) See which ones have authentication API

3) Implement them.

4) ???

View on HN

Are you sure you want OpenID to get more exposure? It already failed once due to hideously poor execution and terrible usability problems. Attaching oauth doesn't seem to solve any of the big problems. It just masks them behind a protocol that works decently on it's own.

The OpenID promise sounds good in a geeky, technical sense, but judging from their past work, I do not trust the OpenID group to build anything remotely viable.

OpenID hasn't failed at all -- I've been noticing more and more sites allowing sign-ins using it, and even a few (primarily for tech audiences) which are OpenID-only.

Of course, there are a few sites which claim OpenID support but implement it poorly (such as news.yc), but that's not a reflection on the protocol.

I do not consider getting a tiny subset of the tech audience using OpenID a case for it being a success. In fact, it did that years ago and has gone nowhere since.

OpenID 2, which was the first version intended to be broadly useful outside of LiveJournal, was published less than two years ago. In that time, OpenID has gained support from every major identity provider and most major consumers. Anybody who uses LiveJournal, Wordpress, StackOverflow, or thousands of other sites can use OpenID instead of a traditional login.

Reality check: "most" major consumers is going too far

http://www.codelathe.com/blog/index.php/2009/08/25/announcin.... Check out Tonido OpenID. It is a truly a decentralized, private OpenID provider.

You're making a case that OpenId hasn't succeeded yet. that's not the same as making a case that it has failed.

Of course, success is subjective and relative. I see a little success every time I log in to stackOverflow via OpenId, or get a OpenId guest comment on LiveJournal.

Yes, I would like OpenID to get more exposure. Not just because I spent time implementing it for our site the first time around--they addressed the execution and usability problems with this new work, and I think it will be much more useful for non-technical users.

The OpenID Foundation folks did not just bolt OAuth onto the side and call it a day. One of the key new features is a protocol that allows the ability to stay on-site within a popup or other login, rather than being redirected to a third party, then back to your intended site.

I have not read the code yet to see exactly how it's different, but it seems to strengthen the attribute exchange as well for profile-type information. Most of the OpenID providers I've used are wildly divergent in how (and how many) attributes are exchangeable with the OpenID consuming site.

Do you not see these as fruitful improvements to the protocol?

5) Profit.

You left me no choice.

Reply on news.ycombinator.com