Comments on: OpenID Middlemans http://blog.docuverse.com/2009/02/10/openid-middlemans/ Don Park's Personal Blog Fri, 11 Jun 2010 22:18:11 +0000 hourly 1 http://wordpress.com/ By: donpark http://blog.docuverse.com/2009/02/10/openid-middlemans/#comment-505 donpark Wed, 11 Feb 2009 05:47:26 +0000 http://blog.docuverse.com/?p=204#comment-505 Marc, if what I described is a "new level of openness" then I say Closed is the New Open. Marc, if what I described is a “new level of openness” then I say Closed is the New Open.

]]> By: donpark http://blog.docuverse.com/2009/02/10/openid-middlemans/#comment-504 donpark Wed, 11 Feb 2009 05:25:05 +0000 http://blog.docuverse.com/?p=204#comment-504 I think it's a matter of "what can they offer to users so they'll ignore complainers crying foul?" Most small OpenID providers don't have rich metadata associated with their OpenID, so another option is to 'wrap' source OpenID with middleman's OpenID along with rich metadata on the wrap. Note that some small OpenID providers will have valuable metadata. For example, banks and brokers as well as any Yodlee-backed services (like Mint and SafePage) will have access to personal wealth metrics which can be attached to OpenID secured with double-blind service. There's a lot of options as well as ways to get tarred and feathered, exciting and terrifying at the same time. I think it’s a matter of “what can they offer to users so they’ll ignore complainers crying foul?” Most small OpenID providers don’t have rich metadata associated with their OpenID, so another option is to ‘wrap’ source OpenID with middleman’s OpenID along with rich metadata on the wrap.

Note that some small OpenID providers will have valuable metadata. For example, banks and brokers as well as any Yodlee-backed services (like Mint and SafePage) will have access to personal wealth metrics which can be attached to OpenID secured with double-blind service.

There’s a lot of options as well as ways to get tarred and feathered, exciting and terrifying at the same time.

]]> By: Marc’s Voice » Blog Archive » 2nd week of Feb ‘09 blogging http://blog.docuverse.com/2009/02/10/openid-middlemans/#comment-503 Marc’s Voice » Blog Archive » 2nd week of Feb ‘09 blogging Wed, 11 Feb 2009 05:22:48 +0000 http://blog.docuverse.com/?p=204#comment-503 [...] Joseph Smarr and John McCrea made some interesting results today at the OpenID UX thingie about their experimental hubrid demo they did with Google.  I’ll do a separate post on this later.  Lots of people are anticipatory of this event and hopeful that we’re heading to new levels of openness. [...] [...] Joseph Smarr and John McCrea made some interesting results today at the OpenID UX thingie about their experimental hubrid demo they did with Google.  I’ll do a separate post on this later.  Lots of people are anticipatory of this event and hopeful that we’re heading to new levels of openness. [...]

]]> By: Steve http://blog.docuverse.com/2009/02/10/openid-middlemans/#comment-502 Steve Wed, 11 Feb 2009 05:02:18 +0000 http://blog.docuverse.com/?p=204#comment-502 Don states "Now, they [FB, Google, ...] are all OpenID providers but, to act as middlemans, they’ll have to also act like OpenID consumers to either pass on third-party OpenID identity or return a proxy identity." Is that true? Can't they be asymetrical OpenID providers? That is to say allow smaller 3rd parties to use their (the bigger players) OpenId servers to validate customers, but not accept OpenID identity credentials from any other OpenID provider. If I was FB, Google, etc. that is what I would do, but I have been accused of being "evil" from time to time. Don states “Now, they [FB, Google, ...] are all OpenID providers but, to act as middlemans, they’ll have to also act like OpenID consumers to either pass on third-party OpenID identity or return a proxy identity.”

Is that true? Can’t they be asymetrical OpenID providers? That is to say allow smaller 3rd parties to use their (the bigger players) OpenId servers to validate customers, but not accept OpenID identity credentials from any other OpenID provider.

If I was FB, Google, etc. that is what I would do, but I have been accused of being “evil” from time to time.

]]>