Nov 10
Digg
Stumbleupon
Technorati
Delicious

OpenId for the mass and what about privacy?


End of October Microsoft announced they would be supporting OpenID with Microsoft Live.

Google followed with its own announcement, that Google accounts would serve as OpenID accounts.

We know, Yahoo has supported OpenID for a while now, anyone using Gmail, Yahoo Mail or Hotmail now has a valid OpenId.
Additionally MySpace and AOL also support OpenID.

Most current users may not be aware of the fact they have an OpenID identifier.
It would be quite interesting
* what are the biggest OpenID providers derived by the frequency of OpenID usage?
* what is the usage ratio between “big” providers and the many users from small OpenID providers?
* Are public small openID providers interesting for mass user? Should any small company or community run an identity server?

Yahoo release the result of a usability study, they did for OpenID.

Jan Rain hast posted results to 6 general UX approaches for OpenID from the Open User Experience (UX) Summit.

In parallel to the UX discussion the most important topic to OpenID is security and privacy for me.
They are currently discussed in the community, but for me not fully answered:

* what about identity revocation, if anybody else get my key?
* what about phishing prevention?
* what about trusted OpenID provider? who can we trust?
* what about privacy of my user data (customer profile, mixed private and business usage)?
* what if my OpenID provider sell my profile, usage or my network data to anybody else?
* what, if there is a legal case to one of my accounts, how to prevent all account access due to any legal case?
* what, if my OpenID provider no longer exists?

OpenID is a great way to reduce our daily account/password overflow and to get easy access to small sites or to test new services.
But is there a more secure way to share email access, private or business data?


Author: Thomas

No Comments

No comments yet.

Comments RSS TrackBack Identifier URI

Leave a comment