<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Gears Future APIs: OpenID and OAuth</title>
	<atom:link href="http://almaer.com/blog/gears-future-apis-openid-and-oauth/feed" rel="self" type="application/rss+xml" />
	<link>http://almaer.com/blog/gears-future-apis-openid-and-oauth</link>
	<description>blogging about life, the universe, and everything tech</description>
	<lastBuildDate>Sat, 08 Sep 2012 07:06:53 -0700</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.4</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: 墨尔本</title>
		<link>http://almaer.com/blog/gears-future-apis-openid-and-oauth/comment-page-1#comment-40825</link>
		<dc:creator>墨尔本</dc:creator>
		<pubDate>Sat, 09 May 2009 01:55:59 +0000</pubDate>
		<guid isPermaLink="false">http://almaer.com/blog/gears-future-apis-openid-and-oauth#comment-40825</guid>
		<description>OpenID rocks!
Thanks for sharing.</description>
		<content:encoded><![CDATA[<p>OpenID rocks!<br />
Thanks for sharing.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: aircraft parts</title>
		<link>http://almaer.com/blog/gears-future-apis-openid-and-oauth/comment-page-1#comment-39185</link>
		<dc:creator>aircraft parts</dc:creator>
		<pubDate>Mon, 07 Jul 2008 08:12:25 +0000</pubDate>
		<guid isPermaLink="false">http://almaer.com/blog/gears-future-apis-openid-and-oauth#comment-39185</guid>
		<description>The thing to note is that you need some way to have a unique claim on some chunk of namespace, and that cannot be fully distributed.</description>
		<content:encoded><![CDATA[<p>The thing to note is that you need some way to have a unique claim on some chunk of namespace, and that cannot be fully distributed.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: John</title>
		<link>http://almaer.com/blog/gears-future-apis-openid-and-oauth/comment-page-1#comment-38749</link>
		<dc:creator>John</dc:creator>
		<pubDate>Tue, 03 Jun 2008 22:23:28 +0000</pubDate>
		<guid isPermaLink="false">http://almaer.com/blog/gears-future-apis-openid-and-oauth#comment-38749</guid>
		<description>So, for OAuth specifically, Gears should be able to look for a WWW-Authenticate: OAuth header (on a 200 or 401 response) and know that there&#039;s an OAuth login possible.  Show a login button to the user (or other UI that&#039;s outside the page), and asynchronously retrieve an XRDS file (proposed extension) from the URL to find out where to to send the user if they _do_ want to log in.</description>
		<content:encoded><![CDATA[<p>So, for OAuth specifically, Gears should be able to look for a WWW-Authenticate: OAuth header (on a 200 or 401 response) and know that there&#8217;s an OAuth login possible.  Show a login button to the user (or other UI that&#8217;s outside the page), and asynchronously retrieve an XRDS file (proposed extension) from the URL to find out where to to send the user if they _do_ want to log in.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: David Recordon</title>
		<link>http://almaer.com/blog/gears-future-apis-openid-and-oauth/comment-page-1#comment-38043</link>
		<dc:creator>David Recordon</dc:creator>
		<pubDate>Fri, 28 Mar 2008 05:34:34 +0000</pubDate>
		<guid isPermaLink="false">http://almaer.com/blog/gears-future-apis-openid-and-oauth#comment-38043</guid>
		<description>I&#039;d love to work with you on making this sort of thing a Gear.  I was chatting with Brad last week about it a little as well.

There is a way in the OpenID Authentication 2.0 spec to discover a Relying Party which probabally could be used to make this work.  I think Yahoo! is one of the few sites that actually publishes this discovery information today.  http://openid.net/specs/openid-authentication-2_0.html#rp_discovery</description>
		<content:encoded><![CDATA[<p>I&#8217;d love to work with you on making this sort of thing a Gear.  I was chatting with Brad last week about it a little as well.</p>
<p>There is a way in the OpenID Authentication 2.0 spec to discover a Relying Party which probabally could be used to make this work.  I think Yahoo! is one of the few sites that actually publishes this discovery information today.  <a href="http://openid.net/specs/openid-authentication-2_0.html#rp_discovery" rel="nofollow">http://openid.net/specs/openid-authentication-2_0.html#rp_discovery</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Pascal Van Hecke</title>
		<link>http://almaer.com/blog/gears-future-apis-openid-and-oauth/comment-page-1#comment-38012</link>
		<dc:creator>Pascal Van Hecke</dc:creator>
		<pubDate>Sat, 22 Mar 2008 10:10:58 +0000</pubDate>
		<guid isPermaLink="false">http://almaer.com/blog/gears-future-apis-openid-and-oauth#comment-38012</guid>
		<description>Example should have been:
&lt;  input name=&quot;openid_url&quot; value=&quot;http://&quot; size=&quot;40&quot; type=&quot;text&quot;   &gt;</description>
		<content:encoded><![CDATA[<p>Example should have been:<br />
&lt;  input name=&#8221;openid_url&#8221; value=&#8221;http://&#8221; size=&#8221;40&#8243; type=&#8221;text&#8221;   &gt;</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Pascal Van Hecke</title>
		<link>http://almaer.com/blog/gears-future-apis-openid-and-oauth/comment-page-1#comment-38011</link>
		<dc:creator>Pascal Van Hecke</dc:creator>
		<pubDate>Sat, 22 Mar 2008 10:02:23 +0000</pubDate>
		<guid isPermaLink="false">http://almaer.com/blog/gears-future-apis-openid-and-oauth#comment-38011</guid>
		<description>Hi,

already commented this at Ajaxian:

this can already be achieved without the autodiscovery I think.
By convention the URL input field has the name openid_url:

Example:


See http://wiki.openid.net/OpenID_Login_Box#OpenID_identifier_input_field

I had the idea of writing a Greasemonkey script to do a one-button or even automatic login but never came around it, maybe someone else will pick this up?</description>
		<content:encoded><![CDATA[<p>Hi,</p>
<p>already commented this at Ajaxian:</p>
<p>this can already be achieved without the autodiscovery I think.<br />
By convention the URL input field has the name openid_url:</p>
<p>Example:</p>
<p>See <a href="http://wiki.openid.net/OpenID_Login_Box#OpenID_identifier_input_field" rel="nofollow">http://wiki.openid.net/OpenID_Login_Box#OpenID_identifier_input_field</a></p>
<p>I had the idea of writing a Greasemonkey script to do a one-button or even automatic login but never came around it, maybe someone else will pick this up?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Kevin Fox</title>
		<link>http://almaer.com/blog/gears-future-apis-openid-and-oauth/comment-page-1#comment-38009</link>
		<dc:creator>Kevin Fox</dc:creator>
		<pubDate>Sat, 22 Mar 2008 04:22:37 +0000</pubDate>
		<guid isPermaLink="false">http://almaer.com/blog/gears-future-apis-openid-and-oauth#comment-38009</guid>
		<description>+1 for the browser being able to auto detect and negotiate OpenID logins, this would be awesome.  I would love to just login to my OP once and then seamlessly go from site to site without having to login all the time. 

There seems to be a movement toward buttons on login pages such as what ClickPass (http://clickpass.com) is doing... I also see Facebook and Yahoo buttons popping as well and am wondering what the best solution really is... plugin or button or some combination?</description>
		<content:encoded><![CDATA[<p>+1 for the browser being able to auto detect and negotiate OpenID logins, this would be awesome.  I would love to just login to my OP once and then seamlessly go from site to site without having to login all the time. </p>
<p>There seems to be a movement toward buttons on login pages such as what ClickPass (<a href="http://clickpass.com" rel="nofollow">http://clickpass.com</a>) is doing&#8230; I also see Facebook and Yahoo buttons popping as well and am wondering what the best solution really is&#8230; plugin or button or some combination?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Brad Neuberg</title>
		<link>http://almaer.com/blog/gears-future-apis-openid-and-oauth/comment-page-1#comment-38006</link>
		<dc:creator>Brad Neuberg</dc:creator>
		<pubDate>Fri, 21 Mar 2008 01:21:33 +0000</pubDate>
		<guid isPermaLink="false">http://almaer.com/blog/gears-future-apis-openid-and-oauth#comment-38006</guid>
		<description>[Cross-posted from Ajaxian]

This is part of a larger idea from the Paper Airplane project called The Smart Browser where we move standardized UI more into the browser and out of web sites, such as signing in, joining groups, recent updates, etc. The browser then interacts with the remote web site through a web service/microformat, formatting its chrome UI appropriately. More details here in the Paper Airplane paper I put out a few years ago:

http://codinginparadise.org/paperairplane/#smart_browser

An excerpt:

&quot;Tools for navigation in browsers progressed rapidly in the early days of the web, until they finally froze at their current state in about 1995 and have remained relatively unchanged. This is sad as the brower could standardize and embed many tools for much more sophisticated ways of dealing with web sites, especially around collaboration.  It&#039;s time for innovation.

Paper Airplane takes this to the next level with the concept of the Smart Brower, where the browser embeds standard navigation controls across the Two Way Web Sites [Brad: Two Way Web Sites were the name of for a new kind of web-site that embedded Wiki-like collaboration deeply into the web] it creates. This section discusses how the Smart Browser makes end-user&#039;s lives easier.

First, Paper Airplane embeds single signon. When a user first starts Paper Airplane they authenticate themselves against the browser, using a signon dialog to unlock a public/private keypair that is stored on the local machine. This public/private keypair is linked to a handle, similar to an AOL screen name, that is globally unique.  It does not establish that they are a specific person but rather that they have a particular handle.  Then, as they navigate to each Two Way Web Site, the browser authenticates them in the background using these keypairs against the remote site.

Single signon goes hand in hand with a standard way to join and unjoin Two Way Web Sites. At any site, if the site creator made it open, a user can press the Join button to become a member of this site:

[IMG: View Mode - Edit Toolbar - http://codinginparadise.org/paperairplane/images/viewmode_edit_toolbar.png]

When this is pressed, in the background the browser sends the user&#039;s public key to the remote site to be used later for single sign on activities, editing, and site roles.

The next standardized interface in the smart browser is a standard way to track site changes, which is a panel that appears in the left-hand sidebar when selected:

[IMG: New Changes Sidebar - http://codinginparadise.org/paperairplane/images/new_changes.png]

This panel is created by using an RSS stream from the remote site, and can track recent site edits using the Paper Airplane Editor, or if the remote site is a blog recent updates to a blog or corporate site, for example. When users go to a new site they won&#039;t have to wonder what has changed; the Recent Changes panel makes it easy for them.

Members of sites can also easily manage roles with the Members sidebar:

[IMG: Members Sidebar - http://codinginparadise.org/paperairplane/images/members.png]

Every page also has a control so that users can tag it with a given topic, such as &quot;important&quot;, “todo&quot;, or “linux”, for example:

[IMG: Cookie Trail - http://codinginparadise.org/paperairplane/images/cookietrail.png]

Then, by pressing the Navigator section in the sidebar they can view all of the pages in a web site sorted by Tag, by Name, and more. This Navigator makes it possible for users to quickly jump to new adhoc categories created by other users, sorted into bottom-up categories using the tagging control. The Navigator also includes other powerful ways to view a web site: Recently Edited, which shows recently edited pages; and My Recent Pages, which shows your own recently edited or viewed pages so that you can quickly jump back to them.  The end result is that structure is brought to collaborative sites in a bottom-up, organic manner rather than through top-down controls that quickly become out of date.

The Navigator also exposes a sorting type called By Index, which takes a bit of explaining but which is very powerful. As pages are created and edited, an automatic index is created in the background. When a user views a site in the Navigator By Index, they will see an automatic index similar to the index in the back of a book or the one in Microsoft Help defining all the words, topics, and relations gleaned from the site itself. Most importantly, if your site members have used Smart Templates to create pages that have simple semantic information in them, then we now have higher-level metadata to hook our index on to. The index can be an extremely powerful way for users to look into &quot;the back of the book&quot; in a sense and jump right to the page and section they need to read or edit. Having an index to view a site is one of the payoffs for using Smart Templates when editing and creating your collaborative site.&quot;</description>
		<content:encoded><![CDATA[<p>[Cross-posted from Ajaxian]</p>
<p>This is part of a larger idea from the Paper Airplane project called The Smart Browser where we move standardized UI more into the browser and out of web sites, such as signing in, joining groups, recent updates, etc. The browser then interacts with the remote web site through a web service/microformat, formatting its chrome UI appropriately. More details here in the Paper Airplane paper I put out a few years ago:</p>
<p><a href="http://codinginparadise.org/paperairplane/#smart_browser" rel="nofollow">http://codinginparadise.org/paperairplane/#smart_browser</a></p>
<p>An excerpt:</p>
<p>&#8220;Tools for navigation in browsers progressed rapidly in the early days of the web, until they finally froze at their current state in about 1995 and have remained relatively unchanged. This is sad as the brower could standardize and embed many tools for much more sophisticated ways of dealing with web sites, especially around collaboration.  It&#8217;s time for innovation.</p>
<p>Paper Airplane takes this to the next level with the concept of the Smart Brower, where the browser embeds standard navigation controls across the Two Way Web Sites [Brad: Two Way Web Sites were the name of for a new kind of web-site that embedded Wiki-like collaboration deeply into the web] it creates. This section discusses how the Smart Browser makes end-user&#8217;s lives easier.</p>
<p>First, Paper Airplane embeds single signon. When a user first starts Paper Airplane they authenticate themselves against the browser, using a signon dialog to unlock a public/private keypair that is stored on the local machine. This public/private keypair is linked to a handle, similar to an AOL screen name, that is globally unique.  It does not establish that they are a specific person but rather that they have a particular handle.  Then, as they navigate to each Two Way Web Site, the browser authenticates them in the background using these keypairs against the remote site.</p>
<p>Single signon goes hand in hand with a standard way to join and unjoin Two Way Web Sites. At any site, if the site creator made it open, a user can press the Join button to become a member of this site:</p>
<p>[IMG: View Mode &#8211; Edit Toolbar &#8211; <a href="http://codinginparadise.org/paperairplane/images/viewmode_edit_toolbar.png" rel="nofollow">http://codinginparadise.org/paperairplane/images/viewmode_edit_toolbar.png</a></p>
<p>When this is pressed, in the background the browser sends the user&#8217;s public key to the remote site to be used later for single sign on activities, editing, and site roles.</p>
<p>The next standardized interface in the smart browser is a standard way to track site changes, which is a panel that appears in the left-hand sidebar when selected:</p>
<p>[IMG: New Changes Sidebar &#8211; <a href="http://codinginparadise.org/paperairplane/images/new_changes.png" rel="nofollow">http://codinginparadise.org/paperairplane/images/new_changes.png</a></p>
<p>This panel is created by using an RSS stream from the remote site, and can track recent site edits using the Paper Airplane Editor, or if the remote site is a blog recent updates to a blog or corporate site, for example. When users go to a new site they won&#8217;t have to wonder what has changed; the Recent Changes panel makes it easy for them.</p>
<p>Members of sites can also easily manage roles with the Members sidebar:</p>
<p>[IMG: Members Sidebar &#8211; <a href="http://codinginparadise.org/paperairplane/images/members.png" rel="nofollow">http://codinginparadise.org/paperairplane/images/members.png</a></p>
<p>Every page also has a control so that users can tag it with a given topic, such as &#8220;important&#8221;, “todo&#8221;, or “linux”, for example:</p>
<p>[IMG: Cookie Trail &#8211; <a href="http://codinginparadise.org/paperairplane/images/cookietrail.png" rel="nofollow">http://codinginparadise.org/paperairplane/images/cookietrail.png</a></p>
<p>Then, by pressing the Navigator section in the sidebar they can view all of the pages in a web site sorted by Tag, by Name, and more. This Navigator makes it possible for users to quickly jump to new adhoc categories created by other users, sorted into bottom-up categories using the tagging control. The Navigator also includes other powerful ways to view a web site: Recently Edited, which shows recently edited pages; and My Recent Pages, which shows your own recently edited or viewed pages so that you can quickly jump back to them.  The end result is that structure is brought to collaborative sites in a bottom-up, organic manner rather than through top-down controls that quickly become out of date.</p>
<p>The Navigator also exposes a sorting type called By Index, which takes a bit of explaining but which is very powerful. As pages are created and edited, an automatic index is created in the background. When a user views a site in the Navigator By Index, they will see an automatic index similar to the index in the back of a book or the one in Microsoft Help defining all the words, topics, and relations gleaned from the site itself. Most importantly, if your site members have used Smart Templates to create pages that have simple semantic information in them, then we now have higher-level metadata to hook our index on to. The index can be an extremely powerful way for users to look into &#8220;the back of the book&#8221; in a sense and jump right to the page and section they need to read or edit. Having an index to view a site is one of the payoffs for using Smart Templates when editing and creating your collaborative site.&#8221;</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Dave Brondsema</title>
		<link>http://almaer.com/blog/gears-future-apis-openid-and-oauth/comment-page-1#comment-38003</link>
		<dc:creator>Dave Brondsema</dc:creator>
		<pubDate>Thu, 20 Mar 2008 17:13:49 +0000</pubDate>
		<guid isPermaLink="false">http://almaer.com/blog/gears-future-apis-openid-and-oauth#comment-38003</guid>
		<description>Does the Seatbelt Firefox extension at https://pip.verisignlabs.com/seatbelt.do do what you&#039;re looking for?</description>
		<content:encoded><![CDATA[<p>Does the Seatbelt Firefox extension at <a href="https://pip.verisignlabs.com/seatbelt.do" rel="nofollow">https://pip.verisignlabs.com/seatbelt.do</a> do what you&#8217;re looking for?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Hans Granqvist</title>
		<link>http://almaer.com/blog/gears-future-apis-openid-and-oauth/comment-page-1#comment-38002</link>
		<dc:creator>Hans Granqvist</dc:creator>
		<pubDate>Thu, 20 Mar 2008 16:27:30 +0000</pubDate>
		<guid isPermaLink="false">http://almaer.com/blog/gears-future-apis-openid-and-oauth#comment-38002</guid>
		<description>I like the browser to handle this for us. 

I tend to think the entire idea of a user having to login at the site is an anachronism! Once logged into the browser, the site should be able to figure out who you are automatically and whisk you to your personalized landing page directly. 

The best part is that it can be made with no change to the OpenID protocol. I wrote  more about it here: http://commented.org/blog/2008/1/3/continuous-openid.html

I&#039;d be curious to see how that could fit with your ideas.</description>
		<content:encoded><![CDATA[<p>I like the browser to handle this for us. </p>
<p>I tend to think the entire idea of a user having to login at the site is an anachronism! Once logged into the browser, the site should be able to figure out who you are automatically and whisk you to your personalized landing page directly. </p>
<p>The best part is that it can be made with no change to the OpenID protocol. I wrote  more about it here: <a href="http://commented.org/blog/2008/1/3/continuous-openid.html" rel="nofollow">http://commented.org/blog/2008/1/3/continuous-openid.html</a></p>
<p>I&#8217;d be curious to see how that could fit with your ideas.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
