Latest Articles
Reasons Why OpenID Connect Is the Future of Identity
When it was first introduced in 2005, many believed, rightly so, that OpenID was the…
Under the covers of OAuth 2.0 at Facebook
For the past three years, the Facebook Platform has been built on top of a session-based authentication system that many developers found complex. In order to make any API calls, you have to understand the details of signature algorithms. It’s a common source of problems for new developers using the Facebook Platform. We have been searching for a way to make
Where’s our country going?
It has been so frustrating lately watching the state of this country. I just read an article that made me laugh out loud, and seemed to articulate much of what has been…
Lessons from Facebook Connect
Last week we finally launched Facebook Connect to the general public. In the time since I joined the team last May, I’ve definitely been surprised by a few things I thought I’d share. think big This time last year, I thought “Man, wouldn’t it be cool if Facebook became an OpenID provider? Maybe if we just
I’m running for the OpenID board of directors
I’m running for the OpenID board of directors. I’m a little nervous, having never done any sort of political thing before. So let me try to answer some questions. Q. Cool! Can I vote for you? Anyone who is a member of the Foundation is eligible to vote. Membership in the foundation costs $25, and requires
How to accept OpenID in a popup without leaving the page
For most sites that accept OpenID today, the user experience is one of two things: User is redirected to the OpenID provider, and then redirected back to the original site. This is the most popular one, but it’s a particularly jarring experience for the user. User is given a Javascript browser popup, but when the
A proposal for a conceptual “Open Stack”
Last summer, John McCrea and Joseph Smarr put together a diagram of the “open stack”. The image showed up in numerous talks throughout last year, culminating in an Open Stack Meetup in December. Last week, Marc Canter sent an email asking for thoughts on crafting a new revision to the “open stack” graphic. I’d like to propose a
Making OpenID more useful: let’s detect logged-in state
One of the biggest issues with OpenID is its usability. Many relying parties are currently faced with a difficult choice: how do you let the user know the provider they should be using? Users may be familiar with the brands of Facebook, Google, Yahoo, etc, but if your site doesn’t show it, then it may
Logout: the other half of the identity equation
This week, Facebook began accepting OpenID for single sign on. At the Internet Identity Workshop, many people raised a lot of questions about Facebook’s implementation, and in general the relationship between single sign in and sign out. In this post, I’ll argue that sign in is only half the battle; if we want OpenID to represent a
Personal
The 8 Best Security Practices on Social Media
You have probably heard it said that every brand that wants to make it in the 21st century marketplace must have a social media presence. All…
OpenID
Reasons Why OpenID Connect Is the Future of Identity
When it was first introduced in 2005, many believed, rightly so, that OpenID was the key to future secure logins on the web. The intention of…
OpenID
Under the covers of OAuth 2.0 at Facebook
For the past three years, the Facebook Platform has been built on top of a session-based authentication system that many developers found complex. In order to make any API calls, you have to understand the details of signature algorithms. It’s a common source of problems for new developers using the Facebook Platform. We have been searching for a way to make
Personal
Geeks in Vegas? Woot!
Last week, Facebook sponsored the TopCoder world finals in Las Vegas. I was lucky enough to go and hang out for a few days with some of the world’s best coders, and it was a fantastic experience. Sadly, I didn’t bring a camera, so I’m linking to these pics from the Flickr photostream. TopCoder is the world’s premier