panzerjohn's blog

Web 2.0 Expo: Mashing Up With User-Centric Identity

Praveen Allavilli and I just finished our talk, "Mashing Up With User-Centric Identity", at Web 2.0 Expo. The final presentation (which differs somewhat from the original version we sent to the conference organizers) is available at http://johnpanzer.com/presos/MashWithIdentity.ppt.

People said it went well; I hope so. We think it's important to deal with 'deputization' and user permissions and I hope we can get a widely accepted OpenID extension to do this as well. In the mean time, our OpenAuth APIs show one way it can be done, and they enable some pretty cool mash-ups.

AOL and 63 Million OpenIDs


Yesterday, I blogged about AOL's work-in-progress on OpenID. It generated a lot of positive commentary. I realized after reading the reactions that I buried the lead: There are now 63 million AOL/AIM OpenIDs[1]. Anyone can get one by signing up for a free AIM account. This is cool.

To address Paul's concern in Please delete my aol OpenID: We definitely want the user to be in control of their online presence. At the moment, the OpenID URL at openid.aol.com redirects you off to an AIM Profile. That's not necessarily the long term experience, though I think it should be one of the default options. George Fletcher has pointed out that it would be even better if we could redirect people off to whatever page they wanted, as long as they could verify that they owned the page. My take is, if you don't actually use the OpenID URL, it doesn't really exist. The same way a Wiki page doesn't exist until you edit it. On the other hand, having people go in and kick the tires to uncover issues is exactly why we're talking about this. So let us know what you think.

Another important point is that you can point at the AOL OpenID service from any web page you own in order to turn its URL into an OpenID. The minimal requirements are basically that you have some AOL or AIM account, and that you add a couple of links to your document's HEAD:

<link rel="openid.server" href="https://api.screenname.aol.com/auth/openidServer" >
<link rel="openid.delegate" href="http://openid.aol.com/screenname" >

We added this to our blogs product in a few minutes minutes and it's in beta now. You can also support YADIS discovery which gives additional capabilities. See Sam Ruby's OpenID for non SuperUsers for a good summary.

Syndicate content