Ideas
We want your OpenID Ideas! Think you’ve come up with a way to improve OpenID? Recognize a good idea when you see one? We want to hear from you!
-
OpenID.net should have a friendly explanation
I'd like to link somewhere to explain openid (from my applications that support openid sign in), and it seems like openid.net would be the logical place.
But at openid.net, there is no clear, newbie-friendly explanation of how it actually works. I click "What is openID" and I get a whole page of text... that doesn't really answer my question.
I think we need another link at the top... like, "How does it work" maybe?
http://openidexplained.com is closer, but it looks a little embarrassing somehow.
657 votes -
Encourage OpenID supported websites to have SSL option
Alot of websites that support OpenID do not use SSL (https://), instead they only have the unsecured http://. My idea is, work with the existing and also new OpenID supported websites and encourage them to setup an https:// version of their website. For example, facebook's url could be https://www.facebook.com. The websites don't have to use https as their default url because SSL is a bit slower. But by having an SSL option it will mean OpenID users will have their info encrypted and it lowers the security risks with OpenID.
250 votesunder review ·
AdminChris Messina
(Admin, OpenID) responded
That’s a great idea. It’s certainly something that OPs and RPs should take into consideration.
There is currently some conversations going on about an OpenID Security Best Practices document; while the spec shouldn’t mandate SSL, it certainly should present the case for supporting it, ideally in a best practices doc.
-
Open ID Login URL? - Not clear on website
I was exploring the features and benefits of the "Intense Debate" plugin for Wordpress, and was prompted to sign into Open ID by providing my Open ID URL.
I have a Google Account, but have never been directly asked for my Open ID account. This lead me to the Open ID website, at which point I thought the information would be clearly indicated on the "Get an Open ID" or "start using your Open ID" page. Instead, it was a bunch irrelevant information about how I already have an account, with links to useless links like Google and Yahoo's landing… more
239 votesplanned ·
AdminChris Messina
(Admin, OpenID) responded
This is a fair criticism and something that we want to address as we continue to make improvements to our newly relaunched website. It has a long way to go still, and this kind of feedback is very helpful in directing our attention. Thanks — and sorry to hear about your frustration.
-
Other languages besides english.
Translations are needed so that users from other countries can understand what OpenID is.
198 votes -
Demo OpenID account should be given to every visitor to openid.net
In order to help new users understand the OpenID system the following would be useful.
Every visitor to openid.net, or the "how OpenID works" page should be given a test run account, such as demo92344.openid.net
This account could be active for 24 hours and no password would be required. Instead the user would be presented with a page that explained this is a test account and that normally they would use a password at this step.
During each login with this temporary OpenID users would be shown a list of permanent ID providers to use.
134 votes -
OpenID.net should offer a test page for OPs
I'd appretiate if OpenID.net could offer a test page for OPs. I'm currently setting up an OpenID server and there was a test service offered by Jan Rain which is now done for something felt like ages.
So a page where you could test the OpenID you offer with test cases for all the situations which can appear telling you what's ok and what's wrong.
79 votes -
Merging OpenID data
I have more than one OpenID. Some of the data is common across the OpenID providers, but some is different. Is there a way to merge the data from multiple OpenID accounts into one master account?
66 votes
AdminChris Messina
(Admin, OpenID) responded
There’s nothing in the OpenID protocol that would really allow this, especially from the data side of things. Unlike, say, credit cards, where you can transfer your balance between different providers, data transfer between different OPs requires a bit more leg work.
What kind of data are you talking about?
-
identifier in email like format
Instead of identifying myself with:
http://example.net/john-doeI would prefer:
john-doe@example.netWe could have a standard approach where identifier@domain translates to http://domain/identifier
I think it would give OpenID more human friendly feel than using URL format.
37 votes -
OpenRep - Open Reputation System
This would be an open and distributed reputation management system that keeps track of a user's reputation throughout the many websites that make up the world wide web.
OpenID provided us with an open and distributed authentication system, but this is where it stops.
I believe that OpenRep is the missing layer between this and the many other 'Social Web' platforms that exist out there (blogs, social networks, e-retailers such as Amazon and Ebay).When a user posts a blog, comments on another user's blog, reviews a product or service, attempts to sell an item on Ebay, tries to purchase… more
37 votes -
OpenID.net should be free to register for individuals, no paid required
I very like to growing OpenID.net indirectly, so I recommend to the OpenID.net Administrators to give the free register for individuals. So, not just me who need it, but there are still many others who need it.
35 votes -
Create flowcharts and *basic* examples for OpenID implementation.
The JanRain library is way to overcomplicated and obfuscated to easily implement into a website. I found myself extremely confused as to what the library was doing or how OpenID really worked behind the scenes. It'd be great if this was a lot simpler, and there were some example documents (as in the result of what a website should return) showing different situations and how those translate into documents. Flowcharts could also be created to explain exactly the process of an OpenID login (not just from a basic viewpoint, but the actual HTTP calls that are made).
29 votes -
28 votes
-
Providers should allow others providers OpenID to be used on their sites
As an example, I've registered with google gmail, so I have an OpenId account from google. Let say I want a Yahoo email account, and I want to use my OpenId from gmail, well I don't see any option for that from yahoo.
Some providers give the option to use existing OpenID but hidden in very small print. Competition I guess.
All these defeat the simplicity mention by openid in the first place.
21 votes -
this is inscrutably broken. Fix. Then fix explanations.
Surprise! I may already have an OpenID... but have no way to use it that I can fathom from your instructions. "How do I log in with OpenID?" says I'll see just one thing to fill in... but I see two. And then I get shunted to a "go login somewhere else" notice... and none of this crazy stuff works.
I'm a web expert, so this is epic fail. And have already given this 10x the attention I would normally before just running away.
20 votes -
You need a test login to verify an OpenID (such as from Yahoo) works
If a person establishes an OpenID from a provider, it's hard to know if it is working. Finding sites that use OpenID is not trivial.
19 votes -
Two way othentication system
Open Id is a great concept and I like to use it in day to day life but security is a critical issue here. I think password is not enough to protection We need two way authentication system which is free to everyone and easy to deploy in servers.
For that We can create a software that we need to install it to the USB flash drive and whenever we need to login we have to use that USB drive which having a software which will authenticate the process Its like a debit card that we using in ATM where… more
19 votes -
18 votes
-
One’s OpenID should be a mirror reflecting his online life
Currently, one’s email address is considered as the center of his online identity, only lesser number of websites use OpenID. On the other hand, even OpenID hasn’t recognized what are it’s potentials. ...
http://blog.budhajeewa.com/ones-openid-should-be-a-mirror-reflecting-his-online-life/
(This is not a spam, just the link to my original blog post!)
18 votes -
Why not translate openid.net for hundreds of languages?
The OpenId.net, only in English, not is soooo open. To have a real global range it's need to be translated for many others languages.
18 votes -
18 votes