Johannes Ernst’s Blog

OpenID is a CNet Webware 100 Finalist

… in the category "Browsing: Web browsers, extensions, widgets, and security", competing against:

  • BeNetSafe
  • Bloglines
  • BlogRovr
  • Firefox
  • Flock
  • Google Reader
  • Greasemonkey
  • IMSafer
  • Internet Explorer 7
  • LeapTag
  • My Yahoo
  • Netvibes
  • NewsGator Online
  • Newsvine
  • OpenID
  • Opera
  • Pageflakes
  • Safari
  • ScrubIT
  • SpringWidgets
  • StumbleUpon
  • Sxipper
  • Yahoo Pipes
  • Yahoo Widgets
  • Yourminis

Here is the important part:

What a grab bag! But another data point for OpenID gaining in stature and visibility.

Next HealthCamp: Saturday, May 26, Palo Alto

James Littlejohn is putting together "HealthCamp 2", following the successful first HealthCamp back in December.

This is not to be confused with the Health 2.0 Conference, put together by Matthew Holt and Indu Subaiya for September, which will be a bit more formal affair. HealthCamp is an un-conference where you determine the agenda.

Sounds like Health 2.0 events are beginning to proliferate …

Searching For An Existence Proof: Liability in a Circle of Trust

I have been looking for a real-world example where the following has actually happened:

  • Two or more parties signed a "circle of trust" kind of agreement, where party A performs authentication of some user, and party B relies on the authentication assertion to do something of value. Possible example: a bank outsources web authentication to a third party.
  • The agreement contains a liability cause that allows party B to sue party A for damages if the authenticated user did not turn out to be the correct user. Example: somebody successfully authenticated as the account owner by party A cleaned out a bank (party B) account, but later it turned out it was not the correct owner because party A made a mistake when authenticating.
  • Such an incident actually occurred, and party B did sue party A based on the "circle of trust" kind of agreement, and did get a non-trivial amount of compensation. Example: the authenticator refunded the bank, and thus the account holder, for the money that went missing.

Again, I’m not looking for an agreement of this kind, but for an actual case where somebody did get paid because they assumed liability. If you do know of one, please do let me know.

Apparently this Blog has Fan Club in Germany

At least a number of people I bumped into today at the European Identity Conference in München described themselves as "fans of this blog", in some cases apparently for years. (Hi, guys! You really think this is a good use of your time?!? ;-))

Let me just say that when I decided to become an engineer, it would not have occurred to me in the slightest that one could have either a fan club, or that it could be a fan club of one’s very own personal publication…

At the First European Identity Conference in München

This is the second day of the First European Identity Conference in München, which is taking place at the Forum Deutsches Museum — the granddaddy of all science and technology museums world-wide and still one of the best after more than 100 years.

Kuppinger Cole + Partner, the München-based analyst firm, has been doing a great job at both organizing the conference, and making it interesting. For my part, I have been at too many conferences where the moderators only asked softball questions, and I always consider it a waste of my time to listen to the resulting extremely predictable answers: But here, Tim Cole is asking very good questions, and so it’s really worth-while.

I’ll be sitting on a panel later today on open-source and identity, and I’m looking forward to being at the receiving end of the probing questions. (I should also say that Tim has been quoting me — both from this blog, and from personal correspondence — extensively throughout this conference, often to pose some kind of edgy question for some other speaker. I am feeling a bit bad about this, because that makes the job harder for my fellow presenters; but then, I personally like edgy questions because they are more illuminating and thus more worthwhile, even if they are sometimes hard to answer. But before anybody who has been at the receiving end this week beat me up: I did not know he was going to quote anything I’ve ever said at all, so I decline all direct responsibility!)

It’s also interesting to see that the market for this kind of technology is very different in Germany and Europe from the US market. As usual, in the US it is far more transparent who the players are, and what their relationships are, because there is a substantial industry making that information visible and forcing companies to react to competition. In Germany, it’s much more a relationship-based approach to business, rather than a market-based one, and so there are so many successful companies here that I have never heard of — and my American friends don’t seem to know them either; often not even the German ones.

But then, as I always say about the digital identity market in the stage that it is in: this is the stage where we need to let a 1000 flowers bloom, and the more the merrier; and in particular the more taking advantage of local or industry-specific knowledge, the better for all of us. Because then, when the true leaders emerge and consolidation happens, it’s clear that it wasn’t just one sector’s, or continent’s, or technology’s, or vertical’s requirements that were taken into account, but all/most of them. Which is the only way how the Identity Big Bang can happen from a commercial perspective.

Next Page »