News for hackers. Stuff that matters.
Re:A digital skeleton key to access any website by rabbyte on Saturday May 09, 2015 @11:02PM (#9518613)
OpenID isn't dead but here's the pre-mortem.

1. The NASCAR problem. Listing out every popular service does not guide the user through the login process.

2. The lost NASCAR problem. I know I signed up with one of these services but which one for this site?

3. The abandoned service problem. How do I access this site after my identity provider closed shop or the service I was using decided to stop supporting OpenID?

4. The redirection dialog problem. What do all these dialogs mean and what access am I granting to who?

5. The phishing problem. The default experience lends itself to teaching people to type secrets into popups / redirects coming from other sites.

6. Nobody wants to be a URL; email is king here. The support for email came late in the game.

7. The double registration problem. I signed up with OpenID which gives the site my basic profile but I still have to "finish" registration by giving more information.

There are many other issues but those are the big ones to me.

There are no comments on this comment yet.