Aehso's Output » oauth http://www.xlml.com/aehso John O'Shea's musings, observations and opinions on anything and everything. Mon, 25 Jan 2010 13:31:40 +0000 http://wordpress.org/?v=2.9.1 en hourly 1 DataPortability.org http://www.xlml.com/aehso/2008/05/23/dataportabilityorg/ http://www.xlml.com/aehso/2008/05/23/dataportabilityorg/#comments Fri, 23 May 2008 08:49:17 +0000 aehso http://www.xlml.com/aehso/2008/05/23/dataportabilityorg/ What he said. ]]> http://www.xlml.com/aehso/2008/05/23/dataportabilityorg/feed/ 0 Identity Fragmentation Diagram http://www.xlml.com/aehso/2007/12/07/identity-fragmentation-diagram/ http://www.xlml.com/aehso/2007/12/07/identity-fragmentation-diagram/#comments Fri, 07 Dec 2007 22:42:40 +0000 aehso http://www.xlml.com/aehso/2007/12/07/identity-fragmentation-diagram/ To further explain why I think that standards like OpenID and OAuth are critical to the evolution of a giant global graph I just had to post a diagram drawn by Francis Shanahan for one of his recent blog posts (click to enlarge).

It should be clear from just looking at this that a) solving this problem would massively improve usability and usage of the world wide web and b) no single company is going to globally solve it with a proprietary solution.

Great diagram.

]]> http://www.xlml.com/aehso/2007/12/07/identity-fragmentation-diagram/feed/ 0 OpenID 2.0 and OAuth Core 1.0 http://www.xlml.com/aehso/2007/12/07/openid-20-and-oauth-core-10/ http://www.xlml.com/aehso/2007/12/07/openid-20-and-oauth-core-10/#comments Fri, 07 Dec 2007 14:09:02 +0000 aehso http://www.xlml.com/aehso/2007/12/07/openid-20-and-oauth-core-10/ The word ‘open’ has been abused terribly in recent months (I’m looking at you OpenSocial and you AT&T/Verizon) but the recently completed OpenID 2.0 and OAuth Core 1.0 specifications are truly open. They really should be on the radar of every self respecting web developer that works on websites/APIs that require authentication (OpenID) and authorization/access-control (OAuth). Both are integral to any hope we have of evolving the existing world wide web into a truly open social network (or the giant global graph as timbl now calls it)

If you are looking for primers then you need go no further than Simon Willison’s How To use OpenID screencast (5 mins) and Explaining OAuth.

That said, minimal OpenID implementations won’t solve all authentication headaches. Phishing is a problem so I suspect OpenID enabled sites will need to employ white list providers as Tim and Dare highlighted this a while back.
.
Now we (the web community that is) need two things to happen.

  1. We need the big online identity silos like Google, Yahoo!, Microsoft Live, Facebook and MySpace – the sites whose login page average web users trust – to step up to the plate and act as OpenID providers.
  2. We need the big API sites like Google Maps/Charts/Base/…, Microsoft Live, Yahoo!/Flickr, Facebook to start working on enabling OAuth access to their APIs.

Note the overlap in the two lists above – yep, those guys own this part of the web. Which will be brave enough to move first? With final specifications in hand, no excuses, please go forth and implement and lets end this www account/data access hell we all live in.

]]> http://www.xlml.com/aehso/2007/12/07/openid-20-and-oauth-core-10/feed/ 0