Johannes Ernst's Blog [XML]  [LID]

Brad Templeton / EFF: "OpenID Is Evil"

Caught your attention? ;-) I think that's why he chose this title.

I just attentended a talk with that title at IIW by Brad Templeton, who is the chair of the board of the Electronic Frontier Foundation and as such pretty influential. He wasn't actually talking about OpenID itself, but about pretty much all technologies that make it easier for users to share identity information on-line. I think his core points are as follows:

  • The easier it is for individuals to share identity information on-line, the more often it will done, and the more often sites will require it. As a result, more personal information will be shared, which is worrisome from a privacy perspective.
  • On one hand, user-centric idea is a great idea. On the other hand, it removes the ability of the users to negotiate with a similar clout as the service providers, and as a result we might actually get less privacy than in case of a more centralized system such Microsoft Passport, with could have benefited from the negotiation clout of a Microsoft. (He was clear that he was not advocating that, of course.)

He was clear (after he had stated the title ... ;-)) that he wanted to be a contrarian with this talk, and that he consciously overstated his case. Primarily to make sure that we technologists building these technologies understand the unintended consequences.

I think he's right about both points, but I also think that there are many counter-trends to that. For example, the easier it is to share information on-line, the less need there is for service providers to store the information, which leads to a net increase in data security (e.g. no backup tapes of my address can be stolen if the service provider does not store it because they know that I can very easily provide it again and thus they have the option not to store it.)

Worth blogging and thinking about though ...

[permanent link]    Add to [del.icio.us

Black B2B

Scary, scary. From McAfee's Avert Labs Blog.

[permanent link]    Add to [del.icio.us

Intro to OSIS Presentation

If you want to learn about OSIS, I put my presentation on OSIS at last week's European Identity Conference on-line here.

For the first time, I'm trying out slides plus audio; let me know how it works. This is an export out of Keynote; I was hoping the file would be smaller, but neither Quicktime nor Flash seem to optimize the slides well when exported from Keynote with sound.

[permanent link]    Add to [del.icio.us

OpenID Wins Webware100 Again

Like last year, OpenID has won the Webware award, in the "utility" category.

They write:

OpenID was created to solve one of the Web's biggest annoyances: log-ins. You've already got a verified identity on one site, so why do you need one for every place you visit? With OpenID, site owners can simply built it into their Web apps and services, letting you use your verified credentials from one site in place of having to sign up for yet another log-in.

The hope of OpenID is that it becomes a standard and universal system across every site, letting new sites spring up and have users more comfortable with signing up with less hassle. As of right now, there are nearly 10,000 sites that support OpenID, and many large and popular companies are adding OpenID as an option for new user registration.

[permanent link]    Add to [del.icio.us

Tutorial: Implementing OpenID

I will give a detailed tutorial on how (and why!) to implement OpenID next Friday at the European Identity Conference in Munich.

If you always wanted to know, here's your chance ;-) I'm particularly interested in your questions, as I personally hate speakers who only talk about things that nobody is interested in, and I figure you feel just the same. So let me know what your questions are and I'll make sure to take time to address them.

[permanent link]    Add to [del.icio.us