Comments for nathanpbell.com http://nathanpbell.com/blog the blog Sat, 13 Mar 2010 23:08:43 +0000 http://wordpress.org/?v=2.5.1 Comment on Make OpenID go away. by sandrar http://nathanpbell.com/blog/make-openid-go-away/#comment-24882 sandrar Thu, 10 Sep 2009 22:30:36 +0000 http://nathanpbell.com/blog/?p=53#comment-24882 Hi! I was surfing and found your blog post... nice! I love your blog. :) Cheers! Sandra. R. Hi! I was surfing and found your blog post… nice! I love your blog. :) Cheers! Sandra. R.

]]> Comment on Make OpenID go away. by Clay Barnes http://nathanpbell.com/blog/make-openid-go-away/#comment-278 Clay Barnes Mon, 25 Aug 2008 13:22:05 +0000 http://nathanpbell.com/blog/?p=53#comment-278 I'm quite curious to hear how your implementation of the Firefox add-on is going. I'm always up for beta-testing (assuming I get to dig about it the source, and it's FF3 compatible). :-D I agree that the language you show above could some tweaking, but the core idea seems sound. Another note is that you should examine how the new save password bar at the top is designed and match that look and feel---that will emphasize the "stored/saved authentication system" parallel. I’m quite curious to hear how your implementation of the Firefox add-on is going. I’m always up for beta-testing (assuming I get to dig about it the source, and it’s FF3 compatible). :-D

I agree that the language you show above could some tweaking, but the core idea seems sound. Another note is that you should examine how the new save password bar at the top is designed and match that look and feel—that will emphasize the “stored/saved authentication system” parallel.

]]> Comment on Make OpenID go away. by Bookmarks about Openid http://nathanpbell.com/blog/make-openid-go-away/#comment-253 Bookmarks about Openid Sun, 17 Aug 2008 17:45:43 +0000 http://nathanpbell.com/blog/?p=53#comment-253 [...] - bookmarked by 4 members originally found by ivan7881 on 2008-07-24 Make OpenID go away. http://nathanpbell.com/blog/make-openid-go-away/ - bookmarked by 4 members originally found by [...] [...] - bookmarked by 4 members originally found by ivan7881 on 2008-07-24 Make OpenID go away. http://nathanpbell.com/blog/make-openid-go-away/ - bookmarked by 4 members originally found by [...]

]]> Comment on Make OpenID go away. by Aaron VonderHaar http://nathanpbell.com/blog/make-openid-go-away/#comment-37 Aaron VonderHaar Wed, 02 Jul 2008 21:20:44 +0000 http://nathanpbell.com/blog/?p=53#comment-37 "Do you want http://*.intrigo.com to know your identity? Allow / Cancel" As a technical user, I 'm not even sure I know what that means. What is my identity? What can intrigo.com do when it has my identity? Why does it want my identity? And if I don't want to allow this, what do I need to do to still get access to the site? As a non-technical user, I just want to use intrigo.com and get my work done (or have fun). I'm going to learn pretty quickly that clicking "Allow" takes me to the site, so I'm just always going to click it. OpenID is a great technology, and integrating with browsers is a good step forward, but it still feels like we're building a solution for people who understand the technology. Either we need to make safe decisions on behalf of the non-technical users, or figure out a good way to explain what we are asking them to decide about. “Do you want http://*.intrigo.com to know your identity? Allow / Cancel”

As a technical user, I ‘m not even sure I know what that means. What is my identity? What can intrigo.com do when it has my identity? Why does it want my identity? And if I don’t want to allow this, what do I need to do to still get access to the site?

As a non-technical user, I just want to use intrigo.com and get my work done (or have fun). I’m going to learn pretty quickly that clicking “Allow” takes me to the site, so I’m just always going to click it.

OpenID is a great technology, and integrating with browsers is a good step forward, but it still feels like we’re building a solution for people who understand the technology. Either we need to make safe decisions on behalf of the non-technical users, or figure out a good way to explain what we are asking them to decide about.

]]> Comment on Make OpenID go away. by OpenID, The Chicken or the Egg « Blogtrigo http://nathanpbell.com/blog/make-openid-go-away/#comment-35 OpenID, The Chicken or the Egg « Blogtrigo Wed, 25 Jun 2008 00:21:33 +0000 http://nathanpbell.com/blog/?p=53#comment-35 [...] I hear about OpenID revolve around usability, including our own Nathan Bell’s thoughts on putting OpenID in the browser. However, I myself am not a tech guy, and see a bigger issue with adoption that needs to be [...] [...] I hear about OpenID revolve around usability, including our own Nathan Bell’s thoughts on putting OpenID in the browser. However, I myself am not a tech guy, and see a bigger issue with adoption that needs to be [...]

]]> Comment on Make OpenID go away. by links for 2008-06-11 « Derivadow.com http://nathanpbell.com/blog/make-openid-go-away/#comment-31 links for 2008-06-11 « Derivadow.com Wed, 11 Jun 2008 18:31:27 +0000 http://nathanpbell.com/blog/?p=53#comment-31 [...] Make OpenID go away - add it to the browser [nathanpbell.com] “There seems to be broad consensus among both OpenID supporters and detractors: OpenID is confusing to use and that for it to have any hope of success OpenID needs to find ways to fade to the background.” (tags: openid) « links for 2008-06-10 [...] [...] Make OpenID go away - add it to the browser [nathanpbell.com] “There seems to be broad consensus among both OpenID supporters and detractors: OpenID is confusing to use and that for it to have any hope of success OpenID needs to find ways to fade to the background.” (tags: openid) « links for 2008-06-10 [...]

]]> Comment on Make OpenID go away. by nathanpbell http://nathanpbell.com/blog/make-openid-go-away/#comment-30 nathanpbell Tue, 10 Jun 2008 19:07:20 +0000 http://nathanpbell.com/blog/?p=53#comment-30 @David I have seen it, in fact I use it and love it! I even linked to it in this blog post :) I think something like Seatbelt is a key part of the solution. Things I love about seatbelt: - it gives me in-browser status of whether or not I'm logged in to my provider. - it makes it easy to setup my provider, assuming I already know who my provider is. It seems that everyone agrees that there are opportunities to build on top of that. I have a really ambiguous (ambitious?) goal in my head: can a novice user, upon installing firefox, setup their OpenID Provider and complete an OpenID login into a RP with out ever knowing they've used OpenID. What would that flow look like? If there is no answer to that, if it's just not possible, then I'm not sure how OpenID will get broad adoption. It seems everyone agrees with that and I hope that anyone who doesn't will contest it and explain, there's merit in that discussion, too! But assuming it's possible, what's next and who (OPs, RP, browser) can contribute what to simplifying the flow? Above is just one idea :) @David I have seen it, in fact I use it and love it! I even linked to it in this blog post :)

I think something like Seatbelt is a key part of the solution. Things I love about seatbelt:
- it gives me in-browser status of whether or not I’m logged in to my provider.
- it makes it easy to setup my provider, assuming I already know who my provider is.

It seems that everyone agrees that there are opportunities to build on top of that. I have a really ambiguous (ambitious?) goal in my head: can a novice user, upon installing firefox, setup their OpenID Provider and complete an OpenID login into a RP with out ever knowing they’ve used OpenID. What would that flow look like?

If there is no answer to that, if it’s just not possible, then I’m not sure how OpenID will get broad adoption. It seems everyone agrees with that and I hope that anyone who doesn’t will contest it and explain, there’s merit in that discussion, too! But assuming it’s possible, what’s next and who (OPs, RP, browser) can contribute what to simplifying the flow? Above is just one idea :)

]]> Comment on Make OpenID go away. by David Recordon http://nathanpbell.com/blog/make-openid-go-away/#comment-29 David Recordon Tue, 10 Jun 2008 18:52:06 +0000 http://nathanpbell.com/blog/?p=53#comment-29 Have you seen the OpenID Seatbelt FF extension from VeriSign? It certainly isn't the entire solution, but was a fun extension to play around with OpenID in the browser and I find it to be pretty useful (though am biased since I worked on it a bit). https://pip.verisignlabs.com/seatbelt.do Have you seen the OpenID Seatbelt FF extension from VeriSign? It certainly isn’t the entire solution, but was a fun extension to play around with OpenID in the browser and I find it to be pretty useful (though am biased since I worked on it a bit).

https://pip.verisignlabs.com/seatbelt.do

]]> Comment on Make OpenID go away. by nathanpbell http://nathanpbell.com/blog/make-openid-go-away/#comment-28 nathanpbell Tue, 10 Jun 2008 18:24:12 +0000 http://nathanpbell.com/blog/?p=53#comment-28 @Chris Thanks for the comment. I hadn't noticed before that there's a spec for RP endpoint discovery already, that's great! The missing piece for this particular flow (besides the browser stuff) seems to be automating the trust handshake between the user and their OP. I now read that at Vidoop you and Scott have been talking about removing the trust screen completely when there is no sReg data changing hands. That would be a huge gain if it can be done, and may even obviate the need to put the trust screen in the browser. I'm not sure though. I'm thinking about putting together a little Firefox extension to test this login flow. I think the shortcomings of my idea will become a lot more obvious when I actually have to use it. But hey, maybe it will work great! :) We'll see what happens. @Chris Thanks for the comment. I hadn’t noticed before that there’s a spec for RP endpoint discovery already, that’s great!

The missing piece for this particular flow (besides the browser stuff) seems to be automating the trust handshake between the user and their OP. I now read that at Vidoop you and Scott have been talking about removing the trust screen completely when there is no sReg data changing hands. That would be a huge gain if it can be done, and may even obviate the need to put the trust screen in the browser. I’m not sure though. I’m thinking about putting together a little Firefox extension to test this login flow. I think the shortcomings of my idea will become a lot more obvious when I actually have to use it. But hey, maybe it will work great! :) We’ll see what happens.

]]> Comment on Make OpenID go away. by Chris Messina http://nathanpbell.com/blog/make-openid-go-away/#comment-27 Chris Messina Tue, 10 Jun 2008 18:09:01 +0000 http://nathanpbell.com/blog/?p=53#comment-27 @Brian: the major problem with ID Selector is helping people choose WHICH of the many account options provided they should actually use. For example, if I have ClaimID, AOL and Yahoo or MyOpenID accounts, which one should I use? It shouldn't necessarily matter, but I would effectively be creating new accounts if I later choose to signin with one of my other accounts... So I'm actually skeptical of the ID Selector UI. @Brian: the major problem with ID Selector is helping people choose WHICH of the many account options provided they should actually use.

For example, if I have ClaimID, AOL and Yahoo or MyOpenID accounts, which one should I use? It shouldn’t necessarily matter, but I would effectively be creating new accounts if I later choose to signin with one of my other accounts… So I’m actually skeptical of the ID Selector UI.

]]>