Using email address as OpenID identifier

2008-04-01 Thread Paul E. Jones
Folks, I've seen discussion here and there on the use of the e-mail address as the OpenID identifier. Perhaps this one says it best: http://www.majordojo.com/2007/02/what-openid-needs.php I share many of same opinions. If OpenID is going to be practically usable by the average person,

RE: Using email address as OpenID identifier

2008-04-01 Thread Eran Hammer-Lahav
The beauty of the current OpenID spec is that anyone can implement it and go live. However, with email identifiers you need email providers to support it. If Google, Yahoo, AOL, or Microsoft announced they are adding such a feature, I am sure the others are likely to follow. Get 2 of these 4

RE: Using email address as OpenID identifier

2008-04-01 Thread Paul E. Jones
Eran, You're entirely correct that this is not an OpenID issue, per se. In fact, not a single word of text would need to be changed in the current v2 specs, as far as I'm concerned. But, I do think that it will take some of the core OpenID team members to put a stake in the ground and

Re: Using email address as OpenID identifier

2008-04-01 Thread Dick Hardt
On 1-Apr-08, at 7:37 PM, Brad Fitzpatrick wrote: -- that said, with directed identity in OpenID 2.0, a user just needs to type in yahoo.com, or press the pretty yahoo button. No typing. I think this is why we don't need to use emails. People are very familiar with typing in a URL in

Re: Using email address as OpenID identifier

2008-04-01 Thread James Henstridge
On 02/04/2008, Paul E. Jones [EMAIL PROTECTED] wrote: Folks, I've seen discussion here and there on the use of the e-mail address as the OpenID identifier. Perhaps this one says it best: http://www.majordojo.com/2007/02/what-openid-needs.php I share many of same opinions. If OpenID is

RE: Using email address as OpenID identifier

2008-04-01 Thread Paul E. Jones
Brad, Your point about DNS limitations is valid. Then again, anybody who will be offering the open identity server is likely going to have control over their DNS. Still, I’m not opposed to alternatives. But, since you brought up the fact that one can enter yahoo.com and get

RE: Using email address as OpenID identifier

2008-04-01 Thread Paul E. Jones
Dick, On this point, I really have to disagree. Even I rarely enter a URL into a web browser. Why bother when I know the web browser will figure it out for me. I don't want to type http:// or https:// :-) More importantly, you and I are different than the average users. I've watched

RE: Using email address as OpenID identifier

2008-04-01 Thread Paul E. Jones
Eran, I'm not suggesting that the address must be a real e-mail address. I'm suggesting that the ID has that form. It's easier for users than entering https://me.yahoo.com/userid. If it happens to also be one's real e-mail address, fine. That would be a plus for me, but I don't see that as

Re: Using email address as OpenID identifier

2008-04-01 Thread Dick Hardt
On 1-Apr-08, at 10:02 PM, Paul E. Jones wrote: Dick, On this point, I really have to disagree. Even I rarely enter a URL into a web browser. Why bother when I know the web browser will figure it out for me. I don’t want to type http:// or https:// :-) I don't want to type the protocol

Re: Using email address as OpenID identifier

2008-04-01 Thread James Henstridge
On 02/04/2008, Paul E. Jones [EMAIL PROTECTED] wrote: Brad, Your point about DNS limitations is valid. Then again, anybody who will be offering the open identity server is likely going to have control over their DNS. Still, I'm not opposed to alternatives. But, since you brought up the