Microsoft Joins the OpenID Foundation

wertigon writes "Windows Live ID just became yet another OpenID-provider. While the cynical me wonders how long it'll be before Microsoft transforms OpenID to something proprietary, they have undoubtedly put even more weight behind the OpenID initiative. So, how long before I can use my OpenID to post on Slashdot?" Patches are always welcome, wertigon ;)

Comments

Re:Tinfoil Hat

[dnwq]

Note to the oblivious: OpenID doesn't eliminate anonymity. Far from it.

Wikipedia:

Since OpenID is decentralized, any website can use OpenID as a way for users to sign in; OpenID does not require a centralized authority to confirm a user's digital identity.

OpenID Concept still has issues.

[mpapet]

It might be okay for joe-shmoe consumer, but there are still common-sense issues standing in the way.

First and foremost is the dead-simple notion, "You mean I'm going to trust a single source for EVERY password for every site I go to? No thanks! I've had my identity stolen already."

If I was in charge of the Right Brigade, I would change the nexus from some server-in-the-sky to your PC storing/providing authentication. I know that's crazy-talk, being responsible for your own identity and everything. Just call me old-fashioned.

Re:Someone Want to Tell Me

[neoform]

This is something the user wants?

I certainly have no interest in having people be able to associate my account on suicidegirls to my facebook account to my msn messenger account...

(i don't really have a suicidegirls acc, i'm just using that as an example)

Re:Color Me Confused

[larry bagina]

"This move" is a fundamental problem with OpenID, not Microsoft specific. Everyone wants to be a provider; no one wants to be a consumer. (Or in slashdot terms, everyone wants to top, no one wants to bottom).

.There have been a spate of announcements recently with a number of companies both large and small announcing that their products will .support. OpenID. [.] All these OpenID support announcements and I am not getting anywhere with my OpenID. [..] it seems that while we have plenty of companies wanting to step up us providers (easy) and have their users use their OpenID.s with other applications, we don.t have enough companies stepping up as consumers of OpenID. [.] it seems that OpenID is flavor of the month and everybody is jumping on for the ride (I could post .Burger King Supports OpenID. and it would make the frontpage of digg). [.] It seems that most of the justification for the big companies and other apps not wanting to be providers is so that they can protect their customer base and maintain a hold..

OpenID and phishing

[jesterzog]

This won't solve the problem but the OpenID Community Wiki has a page documenting different ways in which phishing might occur, a well as a collection of recommendations.

Probably in the long term, assuming OpenID becomes popular, it might come down to browser makers to specifically recognise OpenID, and do things like let the user specify who their OpenID provider is so that it can make it really obvious when the user's logging into the correct place. eg. If the browser doesn't start flashing its borders bright pink when the user visits their claimid.com login page, the user might suspect that they're giving their credentials to the wrong website.