gHacks Technology News | Latest Tech News, Software And Tutorials » authentication http://www.ghacks.net A technology news blog covering software, mobile phones, gadgets, security, the Internet and other relevant areas. Sat, 11 Feb 2012 17:32:23 +0000 en hourly 1 http://wordpress.org/?v=3.3.1 Mozilla BrowserID, Sign-In Systemhttp://www.ghacks.net/2011/07/15/mozilla-browserid-sign-in-system/ http://www.ghacks.net/2011/07/15/mozilla-browserid-sign-in-system/#comments Fri, 15 Jul 2011 10:23:33 +0000 Martin Brinkmann http://www.ghacks.net/?p=47838 Many contents on the Internet require a user account before they can be accessed and used. This means for users that they have to create an account, by entering one of their email addresses, selecting a password, username and maybe some other information. They often get a confirmation email with a link that they have to load to verify the sign-up. Once that is done they can log into the service or system. This feels redundant considering that users have to repeat the very same process for all the sites that require an account.

We have seen services in the past that try to tackle the issue with a global ID. Open ID is one of those services. You basically create a single account at Open ID and can use the account information to sign in on sites that support the technology.

Mozilla has now introduced their own service, called BrowserID. The technology has been designed to work with all browsers and mobile devices. Users benefit from a streamlined process. They only have to verify their email address once before they can use BrowserID to sign into any website supporting BrowserID with two clicks.

BrowserID displays a popup window when a user clicks on sign In on a website that supports it. If the user is logged into BrowserID, all email addresses associated with the account are displayed. All it takes to sign in is to select one, or use the default selection, and click the Sign In button in the window afterwards. A password does not need to be entered anymore.

Mozilla has published a short tutorial for web developers who want to implement BrowserID on their websites and services. The tutorial is available here on the BrowserID website. There is also a short guide that describes the BrowserID technology.

A blog post over at Mozilla summarizes the benefits of the technology:

  • Easy to use: Users sign up once and can use BrowserID on any website supporting it. They save time and get the same log in experience on all of those sites.
  • Secure: Uses the verified email protocol. Public Key Cryptography is used to verify account ownership.
  • Cross-Browser: Works on all modern browsers
  • Decentralized
  • Future browser support
  • Respects Privacy: Does not leak back information to a server about the sites a user visits.

The project is experimental in its current stage. Plans are to integrate the feature into the Firefox web browser at a later point in time.

It is to early to tell if BrowserID will take of in the future. It might if Mozilla succeeds in implementing BrowserID into the Firefox browser natively.

What’s your take on it? (via)

]]> http://www.ghacks.net/2011/07/15/mozilla-browserid-sign-in-system/feed/ 15 Log in to websites with your site’s URL as your OpenIDhttp://www.ghacks.net/2009/07/17/log-into-websites-with-your-sites-url-and-openid/ http://www.ghacks.net/2009/07/17/log-into-websites-with-your-sites-url-and-openid/#comments Fri, 17 Jul 2009 11:12:56 +0000 Joe http://www.ghacks.net/?p=14457 OpenIDA few years ago, Martin covered OpenID, an open authentication system. Since then, it has become increasingly popular and a wide range of sites, from AOL to LiveJournal provide OpenIDs, and OpenID login is also quite common. OpenID is particularly popular for blog comments, with Blogger now integrating support for it.

An OpenID is an URL. However, using an URL like http://computerjoe.myopenid.com/ to log-in and post comments with just doesn’t look sophisticated. I much prefer to use my own blog’s URL to post comments and log-in; it pumps traffic to my blog and frankly just looks better.

Whilst you could run your own OpenID identity server to do this, this takes quite a bit of expertise to set-up and whilst it is probably more secure, it isn’t needed in my opinion.

It is possible to use a any identity server with your website’s URL. I personally use MyOpenID, but I log in to sites with joeanderson.co.uk/blog; not with computerjoe.myopenid.com.

This can be done by simply adding a few lines of HTML to your website’s <head>.

For example, I put

<link rel=”openid.server” href=”http://www.myopenid.com/server” />
<link rel=”openid.delegate” href=”http://computerjoe.myopenid.com” />

Naturally, these have to be modified depending on your username and server, but the provider should provider the information.

There are several benefits using this type of OpenID identificatin. The main one is that it just looks better but the most practical one is probably that it allows you to change provider whilst keeping the same log on. So, if I suddenly decide not to use MyOpenID, I can change to any other provider but my URL remains the same.

]]> http://www.ghacks.net/2009/07/17/log-into-websites-with-your-sites-url-and-openid/feed/ 5