4 ms·

Define "something good." You haven't given any reasons on why it sucks.

by hkr 16y ago

binspace 16y ago
Something that doesn't require you to be a techie to understand. OpenID is a bit advanced for many users. FB Connect actually does a pretty good job at being "easy to use". Just log into your FB account and you are set. I know it's not fair, but most people havn't posted anything to that openid website. Google or Yahoo logins would work, since there's a recognizable brand name and there's a good chance that the user has an account on those sites.
- sprout 16y ago
  >FB Connect actually does a pretty good job at being "easy to use". Just log into your FB account and you are set. The only time I used OpenID, it was for StackOverflow. The workflow was exactly as you describe for Facebook Connect, except substituting Gmail for Facebook. I really don't see where there's room to be tripped up, unless you can't handle the idea that you can log in using accounts from multiple places.
  - dasil003 16y ago
    Because normal users' innate pathological copy-reading avoidance make the login page (http://skitch.com/dasil003/d2ac8/change-openid-stack-overflow http://skitch.com/dasil003/d2ac8/change-openid-stack-overflo...) a usability clusterfuck.
    - carussell 16y ago
      That's not an issue with OpenID. That's an issue with the decision to not use OpenID exclusively and applies to every authentication service on the list in that screenshot, by virtue of that list being a list.
      - binspace 16y ago
        Btw, if you login on another site using Google or Yahoo, you are using OpenID.
jasonkester 16y ago
Something that lets me use my email address as my ID. I can remember my email address. I can't even remember which openID provider I used to sign up for StackOverflow, let alone how they expect me to form the URL that I use for my login. So once a month, when my cookie expires, I get to perform a forgot-password-like action, where I dig through my email to find my username, then try several combinations of it and claimid.net (or was it .org) until it lets me in. But I'm not in. I still have to type in my username and password and, click OK, then click OK on a second screen. That's on the order of 10 more steps than it takes me to type in my email address and password. I remember my email. And I can type it in 400 milliseconds. The thing that replaces OpenID needs to understand that.
- patd 16y ago
  Just put a delegate on a web page URL you'll remember. Like on your personal website. I use my own page and use the OpenId delegate meta-tag to point to the domain that I also don't remember: http://openid.net/specs/openid-authentication-1_1.html#delegating_authentication http://openid.net/specs/openid-authentication-1_1.html#deleg... This way you only have to remember your own URL like: http://openid.mydomain.com http://openid.mydomain.com and the password that you've chosen.
  - jasonkester 16y ago
    Is that actually a serious suggestion? Is that what you'd tell your non-technical users when they asked you what an openid was? Sentences that start with the word "just" should describe something easy to do. Like, you know, using your existing email address as your unique ID.
    - patd 16y ago
      That's not the suggestion I give to non-technical users, that's the suggestion that I give to you that took the time to learn what OpenId is but complains about it. What I tell website developers is to add a login with Google, Yahoo, ... + OpenId (Google and Yahoo are openId providers) and each will redirect users to the correct OpenId endpoint (the one from yahoo, the one from google or your own). And I don't say anything to non-technical users. They will see a "login with Yahoo" or "login with Facebook" or "login with Gmail" and they won't even ask me questions about OpenID. The ones that know what OpenId is and have their own custom URL will use it. Others will use the endpoints provided by Yahoo or Google and won't know what OpenID is and they don't need to.

Define "something good." You haven't given any reasons on why it sucks.

by hkr 16y ago

Define "something good." You haven't given any reasons on why it sucks.

Something that doesn't require you to be a techie to understand. OpenID is a bit advanced for many users. FB Connect actually does a pretty good job at being "easy to use". Just log into your FB account and you are set. I know it's not fair, but most people havn't posted anything to that openid website. Google or Yahoo logins would work, since there's a recognizable brand name and there's a good chance that the user has an account on those sites.

sprout 16y ago
>FB Connect actually does a pretty good job at being "easy to use". Just log into your FB account and you are set. The only time I used OpenID, it was for StackOverflow. The workflow was exactly as you describe for Facebook Connect, except substituting Gmail for Facebook. I really don't see where there's room to be tripped up, unless you can't handle the idea that you can log in using accounts from multiple places.
- dasil003 16y ago
  Because normal users' innate pathological copy-reading avoidance make the login page (http://skitch.com/dasil003/d2ac8/change-openid-stack-overflow http://skitch.com/dasil003/d2ac8/change-openid-stack-overflo...) a usability clusterfuck.
  - carussell 16y ago
    That's not an issue with OpenID. That's an issue with the decision to not use OpenID exclusively and applies to every authentication service on the list in that screenshot, by virtue of that list being a list.
    - binspace 16y ago
      Btw, if you login on another site using Google or Yahoo, you are using OpenID.

jasonkester 16y ago

Something that lets me use my email address as my ID. I can remember my email address. I can't even remember which openID provider I used to sign up for StackOverflow, let alone how they expect me to form the URL that I use for my login. So once a month, when my cookie expires, I get to perform a forgot-password-like action, where I dig through my email to find my username, then try several combinations of it and claimid.net (or was it .org) until it lets me in. But I'm not in. I still have to type in my username and password and, click OK, then click OK on a second screen. That's on the order of 10 more steps than it takes me to type in my email address and password. I remember my email. And I can type it in 400 milliseconds. The thing that replaces OpenID needs to understand that.

patd 16y ago
Just put a delegate on a web page URL you'll remember. Like on your personal website. I use my own page and use the OpenId delegate meta-tag to point to the domain that I also don't remember: http://openid.net/specs/openid-authentication-1_1.html#delegating_authentication http://openid.net/specs/openid-authentication-1_1.html#deleg... This way you only have to remember your own URL like: http://openid.mydomain.com http://openid.mydomain.com and the password that you've chosen.
- jasonkester 16y ago
  Is that actually a serious suggestion? Is that what you'd tell your non-technical users when they asked you what an openid was? Sentences that start with the word "just" should describe something easy to do. Like, you know, using your existing email address as your unique ID.
  - patd 16y ago
    That's not the suggestion I give to non-technical users, that's the suggestion that I give to you that took the time to learn what OpenId is but complains about it. What I tell website developers is to add a login with Google, Yahoo, ... + OpenId (Google and Yahoo are openId providers) and each will redirect users to the correct OpenId endpoint (the one from yahoo, the one from google or your own). And I don't say anything to non-technical users. They will see a "login with Yahoo" or "login with Facebook" or "login with Gmail" and they won't even ask me questions about OpenID. The ones that know what OpenId is and have their own custom URL will use it. Others will use the endpoints provided by Yahoo or Google and won't know what OpenID is and they don't need to.