I thought that at the time! But what stopped it? I know oauth1 had some crazy crypto-in-javascript nonsense that held it back, but that wasn't in openid. I'm not clear what happened there... or whether it's reversible :)
2
Brad, Didn't it have URLs as IDs or something? That part felt weird even at that time (vague memories...)
2
Yes, it used URLs instead of email addresses. It was ahead of its time. (Nowadays non-nerds people are more likely to identity with or share their Facebook or Instagram or Twitter or GitHub handle than an email)
Relying Parties balked at not having an email address to spam with.
2
6
Have you considered using IndieAuth (indieauth.spec.indieweb.org) which does the same now?
I’ve implemented it on my personal site (github.com/shurcooL/home/iss…) and I’m very happy with it. Especially during GitHub outages.
2
1
Here's some background on why this solves the particular problem you're talking about in this thread: aaronparecki.com/2018/07/07/…
1
4
Neat! Seems to still have the URL pasting problem though. How is that UX different from openid, which users didn’t like?
2
1
That problem can only be solved by browsers.
Right now, most of the time the browser autocompletes my URL because I've entered it enough, so I'm not actually typing it out. With any amount of thought, browsers could automate that just like credit card payment forms.
1
1
Why is entering an email address less work than entering a URL? What I'm saying is browsers could have an "account chooser" UI to save a URL and enter it in the login field.
Apr 10, 2020 · 3:39 PM UTC
2
