I'm talking about OpenID in general, not just the Stack Exchange sites.

It saves you from logging in or something? Well, I still have to click the Google icon on the login page? And I thought, when I signed up for the Stack Exchange sites that it would just get all my information from my Google account. But instead I have to create a profile here as well. If I have a profile here anyway, what's the point in using OpenID?

You could just have a Stack Exchange login that works on all Stack Exchange sites.

link|improve this question

The opposite side of the argument: Why not use it? stackoverflow.com/questions/410085/… – Beau Martínez Aug 17 '10 at 10:00
1  
Sorry, but OpenID is just another web application, so either it belongs on our Web Apps or Webmasters sites – Ivo Flipse Aug 18 '10 at 17:23
Bloody hell, I really hate SE sites when it's like this, this question is upvoted 9 times, 3 favourites and the top answer is upvoted 27 times. I think people want the answer and the question. Anyway your closing has done nothing as the answers are already there So whats the effing point????? – Jonathan. Aug 19 '10 at 9:31
3  
The point is, that when the OP, when asking a question outside of the scope of the site, starts abusing the moderators for doing what they are supposed to, they can delete the question altogether. We could have. The question took some time to receive flags, and was not initially on the radar. Once it was, it was found not meeting the requirements for the FAQ. The problem is if we let it go and close other questions, this will always be used as an excuse to keep others open. Votes are not considered when comparing the FAQ criteria and scope of the site. Most votes where agreement votes. – Diago Aug 22 '10 at 12:42
feedback

closed as off topic by Ivo Flipse Aug 18 '10 at 17:22

Questions on Super User are expected to generally relate to computer software or computer hardware, within the scope defined in the faq.

7 Answers

up vote 32 down vote accepted

Let's say, for example, that you're using Google as your OpenID provider and logging into SE with this OpenID (so in OpenID vocabulary, SE is a relying party).

In this scenario, Google is responsible for authenticating you. In practical terms, that means you don't need to set a password on SE. You only have a password with Google, and only Google knows it. In particular, you don't need to trust SE to keep your password safe.

The same goes for any personal information that you may have filled in your account. You only have to trust Google with it, not SE, because SE will only see the personal information that Google allows it to see. (Different providers offer you more or less control over what relying parties can see)

Another property of OpenID (which can be seen as a benefit or a problem) is that you only need to store your personal information once. For example, if your email address changes, you only need to tell Google, and not the many different relying parties you may have set up to handle your OpenID. (The reason this can be a problem is if the OpenID provider doesn't give you enough control over which relying parties can see what information, so that you end up e.g. telling everyone your age when you only wanted to convey it to a particular website that has age restrictions.)

Yet another different property of OpenID (which can also be good or bad) is that you can have the same persona on multiple sites. This is done on Stack Exchange: you can link your account at Stack Overflow with your account at Super User and your account at Server Fault and so on. The sites know that you're the same person, and not just someone who's happened to choose the same user name, because you use the same OpenID on all sites.

link|improve this answer
1  
but why should I have to manually sign up for sites, surely I should just be able to visit the site, and after having say logged into my gmail in the same browser session, and have an account already made for me? – Jonathan. Aug 16 '10 at 19:02
It's not all the sites you visit that you want to create an account. If the accounts were automatically created based on your openID, you would have accounts everywhere or you would have to log off before visiting a site and relog for another one. Also different sites may need different info from you. – laurent Aug 16 '10 at 19:28
3  
@Jonathan: it's a compromise between usability and privacy. The behavior you describe provides maximum usability: you're automatically logged in everywhere. But that means everyone knows who you are, which means you have no privacy. – Gilles Aug 16 '10 at 19:30
1  
@Jonathan, most users use the same password all over the Internet, including very personal information like Health Insurance, Banks, Financial/401k/IRA/Retirement, Google, your e-mail, Facebook, Stack Exchange, and plenty more. So how much do you trust the SE guys? Do you want them knowing that password? Or would you rather that just one place knows your password? -- I'm sure you're one of the 1% of people who do use different password, of course... – Chris S Aug 17 '10 at 0:31
1  
Even Jeff Atwood had it happen to him: codinghorror.com/blog/2009/05/i-just-logged-in-as-you.html and codinghorror.com/blog/2009/05/… – Chris S Aug 17 '10 at 0:38
show 6 more comments
feedback

For example, you don't get additional user name and password that you have to remember.

link|improve this answer
10  
This is THE number one advantage for me. – Benjol Aug 16 '10 at 13:10
1  
One password to rule them all. – Adam Backstrom Aug 16 '10 at 19:17
feedback

Benefits of OpenID for the individual:

Performance:

  • Accelerate Sign Up Process at Your Favorite Websites.

Usability:

  • Reduce Frustration Associated with Maintaining Multiple Usernames and Passwords

Security:

  • Gain Greater Control Over Your Online Identity
  • Minimize Password Security Risks

For more detail, see Benefits of OpenID.

link|improve this answer
feedback

For you as a user, think about how much of a hassle it is to sign up for yet another website...

  1. Click the "register" link
  2. Think up a username
  3. And a password
  4. Enter your email address
  5. Submit
  6. Discover that username is already taken
  7. Repeat the above a bunch of times
  8. Finally it accepts your username
  9. Wait for the confirmation email
  10. Click the confirmation link
  11. Record that login information someplace you can find it again later
  12. Now you can finally use the site.

Now consider OpenId.

  1. click the "login" link
  2. click "open id"
  3. enter your openid
  4. enter your password
  5. use the site

For you as a website owner, think about what a hassle it is to manage your subscriber list

  1. You have to collect user info
  2. And save it someplace
  3. You need a way for your users to manage their data
  4. You need a way to reset their password

Or you can use Open ID

  1. Attach to the OpenID API

So... in theory, it makes live easier for both the users and the site owners.

link|improve this answer
1  
On top of that, you have to implement a secure way to store user data. – Hello71 Aug 17 '10 at 0:15
feedback

Well, for one, you don't have to give random details to various different companies if you don't want to. SE, as far as I know, doesn't get your openID email address (if you're with google, for example) unless you fill it in on your profile page. Also, when you go to, say, 5 different sites a day, you don't have to log in multiple times (ie gmail, youtube, SE sites would be at least 3 logins without an OID style login)

link|improve this answer
feedback

Simple:

1 login and 1 password for x-amount of websites.

link|improve this answer
feedback

Personally, I love it, not having yet ANOTHER login and it is really nice, because if you are using your own computer, and are already logged in with cookies with your original OpenID (such as Google), then you can log right in, after registering, no typing of passwords or messing with usernames, SUPER quick! That's why I love it, IMHO. :-)

link|improve this answer
feedback

Not the answer you're looking for? Browse other questions tagged or ask your own question.