Posts Tagged ‘openid’

Tips for a more appealing spreadopenid.org

Dienstag, Januar 8th, 2008

I really don’t want to be a killjoy, but the current state of spreadopenid.org is not appealing at all. I appreciate its effort and I know this is work in progress. So I won’t complain about the difficult stuff like making the provider matrix more usable. I’m sure you guys are working hard on this.

Instead I chose some points that may not be too obvious to you developers ;) Here are my suggestions:

1. Make it Readable!

Shortly after launch I sent a message to the authors via Twitter, so maybe it’s gone lost. For the record, here is it again:

The font-size in the main column is much to small for the column’s width. Enlarge it and/or make the column narrower!

Additionally adjust paragraph indents, margins, paddings, image alignments, link colors etc.

2. Get a Design and Do Graphics!

I’ll be so blunt and allege that for most people an “appealing website” means graphics. So, please, do graphics! Use images, charts and other visualizations wherever it supports you to make your point clear.

Good recent examples from “our” area of interest:

[Update: Added the first two to the list. Thanks to RWW.]

Note that most of these sites are developer targeted, i.e. for an audience that’s usually fine with long text-only specs. Yet, they offer me a quick overview what their respective objective is. Normal, non-techy users, will request that even more.

3. Drop the Planet OpenID sidebar!

Most non-geeks aren’t familiar with the Planet aggregator and will assume that this is editorial content. But it’s not and most articles appearing there will not be useful for them.

Hope this helps someone.

OpenID browser integration with auto-login through whitelists

Samstag, Dezember 15th, 2007

Thinking about whether OpenID is capable of true single-sign-on I came to the conclusion that it’s probably not designed for this, but that browser integration could provide an almost similar experience if there was a standard for this. So here’s my question.

(Note that I know of Verisign’s Seatbelt and Sxipper. But both do not offer what I request here, AFAIK.)

Dear lazyweb,

is there a project or standard proposition that aims to (or even an implementation that already does) enable OpenID browser integration in the following way?

  1. let the user create a whitelist à la “always use xyz.myopenid.com for foobarsite.com”
  2. let the browser use this whitelist to send a standardized cookie or HTTP-header to the relying party site on each request (or only when no standardized and valid session cookie exists)
  3. on receiving such an request, the RP should automagically start the authentication process — and finish it transparently for me if I’m logged into my OpenID provider

This would be a huge step forward, I think.