{"id":46,"date":"2007-12-02T13:28:09","date_gmt":"2007-12-02T20:28:09","guid":{"rendered":"https:\/\/self-issued.info\/?p=46"},"modified":"2008-02-07T02:08:52","modified_gmt":"2008-02-07T09:08:52","slug":"look-ma-no-passwords","status":"publish","type":"post","link":"https:\/\/self-issued.info\/?p=46","title":{"rendered":"Look ma! No passwords!"},"content":{"rendered":"

As Vittorio excitedly pointed out<\/a>, you never have to enter a password to create or use an OpenID at MyOpenID.com<\/a>. Kim’s excited<\/a> about this too. So am I. When I wrote<\/a>:<\/p>\n

\nThe JanRain team has done a fantastic job integrating account sign-up, sign-in, and recovery via Information Cards into their OpenID provider. I’m really impressed by how well this fits into the rest of their high-quality offering.\n<\/p><\/blockquote>\n

I should have expanded upon my point “fantastic job integrating account sign-up” to explicitly call out that no passwords are needed. Notice the Information Card button on the sign-up page below. Thanks Vittorio and Kim, for sharing your excitement about this. I’m hoping that as other sites integrate Information Card sign-in to their user experience that they’ll also follow this example (and the guidance in the deployment guide<\/a>) and enable password-less sign-up with Information Cards.<\/p>\n

\"MyOpenID.com<\/span><\/p>\n

Related to this is JanRain’s earlier announcement that they are including PAPE<\/a> support in their widely-used OpenID relying party libraries. As Kevin Fox wrote<\/a>:<\/p>\n

\nJust a note to let everyone know that we are developing and will release relying party libraries supporting PAPE<\/a> once the specification is finalized.
\nWe have deployed an example relying party available here:
\nopenidenabled.com\/python-openid\/trunk\/examples\/consumer\/<\/a>
\nThe example fully supports OpenID 2.0 draft 12, and can request phishing-resistant authentication using PAPE. Feel free to use it for testing.
\nPAPE allows sites that use OpenID 2.0 authentication to get information about the way that the user authenticated to the provider. This is an important step on the way to getting the convenience needed of OpenID authentication for higher-valued transactions. It’s trivial to implement and will be included in JanRain’s OpenID 2.0 libraries<\/a> as well as Sxip’s libraries<\/a>.\n<\/p><\/blockquote>\n

Gary Krall also added<\/a> that:<\/p>\n

\nVerisign will also be releasing an update to the JOID library<\/a> which we use on the PiP<\/a> for as you may know we have added PAPE support to the PiP.\n<\/p><\/blockquote>\n

And I’ll add that MyOpenID.com<\/a> and SignOn.com<\/a> both also support PAPE on their OpenID providers.<\/p>\n

Why is this exciting? Because it means that without use of without any use of passwords, people can create and use OpenIDs with their Information Cards. And that sites accepting OpenIDs can ask for phishing-resistant authentication when you sign in — which these OpenIDs will do for you. All more great steps towards building a convenient, secure, ubiquitous identity layer for the Internet!<\/p>\n","protected":false},"excerpt":{"rendered":"

As Vittorio excitedly pointed out<\/a>, you never have to enter a password to create or use an OpenID at MyOpenID.com<\/a>. Kim’s excited<\/a> about this too. So am I.<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3,20,14,19],"tags":[],"class_list":["post-46","post","type-post","status-publish","format-standard","hentry","category-information-cards","category-janrain","category-openid","category-phishing-resistance"],"_links":{"self":[{"href":"https:\/\/self-issued.info\/index.php?rest_route=\/wp\/v2\/posts\/46","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/self-issued.info\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/self-issued.info\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/self-issued.info\/index.php?rest_route=\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/self-issued.info\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=46"}],"version-history":[{"count":0,"href":"https:\/\/self-issued.info\/index.php?rest_route=\/wp\/v2\/posts\/46\/revisions"}],"wp:attachment":[{"href":"https:\/\/self-issued.info\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=46"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/self-issued.info\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=46"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/self-issued.info\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=46"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}