Question

7

1

I haven't used it ever in any other place than in SO family.

Does it has a real future or it is just a fad?

flag	asked Jul 15 at 9:06 Oscar Reyes 1,667●3●23 62% accept rate

Simon P Stevens · Answer 1 · 2009-07-15 09:10:09Z

12

SO is the first site I've used it at and I've got to say it's fantastic. I sign in once to my Google account and never have to type another password again for all the SO family of sites. Brilliant.

Surely benefits like that will gradually bring it to the mainstream.

We just need some of the big guys to start using it.

answered Jul 15 at 9:10

Simon P Stevens
2,725●4●16

+1, but why do we need more "big guys" using OpenID? There are enough big providers – Facebook, Google, etc. – that clients are already likely to have OpenIDs, although I'll say that Google's solution is rather half-baked. – Nikhil Chelliah Jul 15 at 9:31

3

What we need is the big providers to promote it as their primary signon mechanism. to get more people using it. Like you so, most people have probably got at least 1 OpenId, but just don't use it for anything other than the site they got it on. – Simon P Stevens Jul 15 at 9:35

I agree with Simon, there's too much incentive right now to be an OpenID provider and not enough to be a relying party. – Stephen Jennings Jul 15 at 9:59

There's plenty of incentive to be a relying party IMO. All the benefits that Simon says (ha ha!) he's seeing on the SO family are reasons to be an RP. When he says "the big guys" need to start using it, I take it to mean (and agree with this meaning) that big guys need to start using it as an RP. I agree, we have all the major OPs we need. – Andrew Arnott Aug 23 at 1:29

Diago · Answer 2 · 2009-07-15 09:17:54Z

I use it on about 6 sites at the moment and it is definitely not a fad. We are implementing a similar solution for our enterprise environment where we have various different companies sharing internet sites and resources, and need a single sign-on solution.

Sam152 · Answer 3 · 2009-07-15 09:07:40Z

2

Well now that big sites like Facebook are starting to take notice I would say for sure there is a future for OpenID.

answered Jul 15 at 9:07

Sam152
1,154●3●12

becomingGuru · Answer 4 · 2009-07-15 09:55:10Z

The biggest difference is, You can own an url that you use as the openID. You, that way, don't have to depend third parties like Google or Facebook to authenticate you. You can easily change your owned url association into any OpenId provider

mafutrct · Answer 5 · 2009-07-15 09:44:44Z

1

I first used it for Wordpress.com and quickly came to love it. It's being adapted by so many sites I'm positive it has a bright future.

answered Jul 15 at 9:44

mafutrct
120●2●6

Bruce McLeod · Answer 6 · 2009-07-15 09:59:17Z

I think that OpenID can deliver what Windows Live ID has tried to for years. The truly open nature of OpenID, where you can run your own provider or use a third party without any licensing fees will be what makes it succeed.

Ehtyar · Answer 7 · 2009-07-15 10:11:06Z

1

I'm concerned about the security implications of OpenID personally. Specifically, what happens if your password is compromised? We're constantly encouraged to use dissimilar passwords across the Internet, and yet here we are using a service that encourages, even forces, us to use an identical password to access multiple sites. How are we going to keep our online identities secure when but a single breach gives an attacker access to as many resources as we've attached to our OpenID?

Ehtyar.

answered Jul 15 at 10:11

Ehtyar
491●4●14

ip restriction? – Pacifika Jul 15 at 10:16

4

Well, any username/password site that I can think of links your account to an email address, which is how it verifies password reset requests. So how many passwords depend on nobody breaking into your email? Plus, you can pick an openid provider that does as much authentication as you like - maybe it requires a synchronous token, charts your mood so it can verify answers to "how do you feel right now", etc, ad nauseum. The amount of security is left to you to decide (by choosing an openid provider), and not to the content provider to dictate. – rampion Jul 15 at 10:26

You make some good points rampion. +1 – Ehtyar Jul 15 at 10:36

1

So don't use an OpenID provider that does password-based authentication? myopenid.com allows SSL client certificate authentication, with phone verification and revokation. Or, use really strong passwords (24+ characters long). – jtimberman Jul 29 at 15:39

Who said anything about using a password? OpenID Providers can and should offer phishing resistant credentials such as InfoCard, X.509 certs, or other solutions. One I particularly like is myvidoop.com, since it offers strong phishing protection that is also portable across computers and browsers. – Andrew Arnott Aug 23 at 2:27

John Downey · Answer 8 · 2009-07-15 09:37:51Z

I think it definitely has a future especially in the area of identity/authentication federation. It is much easier to get system administrators to let you setup an OpenID provider locally that talks to your authentication system (LDAP, Active Directory, etc) then to let some SaaS application talk directly to the authentication system from the cloud.

n00ki3 · Answer 9 · 2009-07-15 10:09:26Z

0

I think OpenID will become more and more popular. Just last week Google announces that GoogleApps become openid :
http://www.v3.co.uk/v3/news/2245770/google-apps-become-openid

answered Jul 15 at 10:09

n00ki3
304●1●8

Paul Nathan · Answer 10 · 2009-07-16 16:19:59Z

Dreamwidth.org uses OpenID.

I feel it has a real future, so long as there is an increasing number of sites that adopt it.

Remember Microsoft Passport, though? There is a big concern over centralized IDs; OpenID is decentralized, so I think it has more future.

Is there a real future for OpenID

10 Answers

Your Answer

Not the answer you're looking for? Browse other questions tagged openid future usage or ask your own question.

Welcome!

Related