News for hackers. Stuff that matters.
Re:Your Gmail Account is Now An OpenID by gsiener on Wednesday October 29, 2008 @04:15PM (#347943)
Seems like a compromise on Google's part would be implementing something like: http://openid.google.com/username

Standard URI, and would forward you to google to login as normal.

Re:Your Gmail Account is Now An OpenID by axod on Wednesday October 29, 2008 @05:04PM (#348017)
End users do not equate a URI as being anything that identifies them. To them, that is a website.

Why is openID hell bent on trying to spin the tables on everything that people know and are used to? They know email address = my identification/username.

Re:Your Gmail Account is Now An OpenID by michaelneale on Wednesday October 29, 2008 @05:53PM (#348085)
yeah its confusing as all heck to users.

The ONLY possible upside I can see, is that it slightly reduces the risk that they give the crown jewels (say, their Google User name and password) to some malicious site mistaking it for an open ID log in.

In other words, the fact that the identity is the web site is a feature. It may not be the right feature, but I think there is some design thought behind it being a url. So users get used to not immediately providing a password, but instead this URL, and THEN after some redirect shenanigans, they do their password etc...