Comments on: How to use OpenID? http://blogs.gnome.org/bolsh/2008/02/14/how-to-use-openid/ Dave Neary's view of the world Sun, 11 Dec 2011 14:17:21 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: jdub http://blogs.gnome.org/bolsh/2008/02/14/how-to-use-openid/comment-page-1/#comment-1152 jdub Fri, 15 Feb 2008 00:02:46 +0000 http://blogs.gnome.org/bolsh/2008/02/14/how-to-use-openid/#comment-1152 That's a usability problem with the form you're filling out -- which is probably the blogs.gnome.org login or comment forms, right? :-) In this case, you can just enter your OpenID and ignore the other two fields, and let the OpenID provider hand them over (if it doesn't have them, or doesn't pass them over, WordPress will be as cranky at you if you didn't put them in manually). Ideally, the form would only ask for what it needs, and handle a lack of info from the OpenID provider gracefully (by showing an additional page, for instance). But the WordPress OpenID plugin basically just co-opts the normal form, and can't make it quite that simple just yet. :-) That’s a usability problem with the form you’re filling out — which is probably the blogs.gnome.org login or comment forms, right? :-)

In this case, you can just enter your OpenID and ignore the other two fields, and let the OpenID provider hand them over (if it doesn’t have them, or doesn’t pass them over, WordPress will be as cranky at you if you didn’t put them in manually).

Ideally, the form would only ask for what it needs, and handle a lack of info from the OpenID provider gracefully (by showing an additional page, for instance). But the WordPress OpenID plugin basically just co-opts the normal form, and can’t make it quite that simple just yet. :-)

]]> By: Michael R. Head http://blogs.gnome.org/bolsh/2008/02/14/how-to-use-openid/comment-page-1/#comment-1151 Michael R. Head Thu, 14 Feb 2008 23:56:34 +0000 http://blogs.gnome.org/bolsh/2008/02/14/how-to-use-openid/#comment-1151 And yeah, when I submitted, it popped me through to an AOL login page where I put my AIM password in. And yeah, when I submitted, it popped me through to an AOL login page where I put my AIM password in.

]]> By: Michael R. Head http://blogs.gnome.org/bolsh/2008/02/14/how-to-use-openid/comment-page-1/#comment-1150 Michael R. Head Thu, 14 Feb 2008 23:55:07 +0000 http://blogs.gnome.org/bolsh/2008/02/14/how-to-use-openid/#comment-1150 On your site, I just put http://openid.aol.com/michaelrhead (where michaelrhead is my AIM id) along with my name and email address. Hopefully it'll work when I submit the comment. On your site, I just put http://openid.aol.com/michaelrhead (where michaelrhead is my AIM id) along with my name and email address. Hopefully it’ll work when I submit the comment.

]]> By: Bård Aase http://blogs.gnome.org/bolsh/2008/02/14/how-to-use-openid/comment-page-1/#comment-1149 Bård Aase Thu, 14 Feb 2008 23:08:10 +0000 http://blogs.gnome.org/bolsh/2008/02/14/how-to-use-openid/#comment-1149 Just wanted to test if my openID works, I haven't figured it all out myself either Just wanted to test if my openID works, I haven’t figured it all out myself either

]]> By: Justin Haygood http://blogs.gnome.org/bolsh/2008/02/14/how-to-use-openid/comment-page-1/#comment-1148 Justin Haygood Thu, 14 Feb 2008 22:52:18 +0000 http://blogs.gnome.org/bolsh/2008/02/14/how-to-use-openid/#comment-1148 AOL: http://openid.aol.com/ Yahoo! http://me.yahoo.com AOL supports 1.1, Yahoo! is only 2.0 AOL: http://openid.aol.com/
Yahoo! http://me.yahoo.com

AOL supports 1.1, Yahoo! is only 2.0

]]> By: Anonymous http://blogs.gnome.org/bolsh/2008/02/14/how-to-use-openid/comment-page-1/#comment-1147 Anonymous Thu, 14 Feb 2008 19:09:15 +0000 http://blogs.gnome.org/bolsh/2008/02/14/how-to-use-openid/#comment-1147 1) discard OpenID URL. 2) enter username and password 3) have actual security OpenID has huge gaping security flaws you could drive a truck through, and doesn't even provide the basic guarantee that a given OpenID represents the same user from one login to another. Not only does it not provide the benefits it claims to provide, it doesn't even provide the benefits a simple username and password provide. Allowing OpenID ends up worse than anonymity, because with OpenID you *think* you have user continuity and no impersonation, but you don't. 1) discard OpenID URL.
2) enter username and password
3) have actual security

OpenID has huge gaping security flaws you could drive a truck through, and doesn’t even provide the basic guarantee that a given OpenID represents the same user from one login to another. Not only does it not provide the benefits it claims to provide, it doesn’t even provide the benefits a simple username and password provide. Allowing OpenID ends up worse than anonymity, because with OpenID you *think* you have user continuity and no impersonation, but you don’t.

]]> By: Kelly Clowers http://blogs.gnome.org/bolsh/2008/02/14/how-to-use-openid/comment-page-1/#comment-1146 Kelly Clowers Thu, 14 Feb 2008 18:36:25 +0000 http://blogs.gnome.org/bolsh/2008/02/14/how-to-use-openid/#comment-1146 <blockquote>Firstly, there is some bug here, it thinks I’m logged in as Kelly Clowers and tells me my comment is awaiting moderation.</blockquote> o_O That's a little weird, but it seems to have worked out in the end.

Firstly, there is some bug here, it thinks I’m logged in as Kelly Clowers and tells me my comment is awaiting moderation.

o_O

That’s a little weird, but it seems to have worked out in the end.

]]> By: Jorge O. Castro http://blogs.gnome.org/bolsh/2008/02/14/how-to-use-openid/comment-page-1/#comment-1145 Jorge O. Castro Thu, 14 Feb 2008 18:00:29 +0000 http://blogs.gnome.org/bolsh/2008/02/14/how-to-use-openid/#comment-1145 I don't know how to use my openid either, so I am trying it for this blog comment. :) I don’t know how to use my openid either, so I am trying it for this blog comment. :)

]]> By: James Galvin http://blogs.gnome.org/bolsh/2008/02/14/how-to-use-openid/comment-page-1/#comment-1144 James Galvin Thu, 14 Feb 2008 17:50:07 +0000 http://blogs.gnome.org/bolsh/2008/02/14/how-to-use-openid/#comment-1144 If you see this comment and if you didn't see my last comment, there is a bug. here. If you see this comment and if you didn’t see my last comment, there is a bug. here.

]]> By: James Galvin http://blogs.gnome.org/bolsh/2008/02/14/how-to-use-openid/comment-page-1/#comment-1143 James Galvin Thu, 14 Feb 2008 17:48:39 +0000 http://blogs.gnome.org/bolsh/2008/02/14/how-to-use-openid/#comment-1143 Firstly, there is some bug here, it thinks I'm logged in as Kelly Clowers and tells me my comment is awaiting moderation. OpenID plugin not working correctly. Secondly, you're not missing anything obvious. Fact is OpenID is freakin confusing. I use my homepage URL as my OpenID, and it references an open ID provider (in this case Verisign) but would allow me to change to a different OpenID provider at any time and keep the same URL. Firstly, there is some bug here, it thinks I’m logged in as Kelly Clowers and tells me my comment is awaiting moderation. OpenID plugin not working correctly.

Secondly, you’re not missing anything obvious. Fact is OpenID is freakin confusing. I use my homepage URL as my OpenID, and it references an open ID provider (in this case Verisign) but would allow me to change to a different OpenID provider at any time and keep the same URL.

]]>