Regarding passwords -- I completely agree.  I thought long and hard
about how to allow people to claim a username on Delancey without ever
asking for their del.icio.us password.  The compromise was a "claim"
system whereby they could set up a new password for Delancey, and then
use a bookmark in their del.icio.us account to verify they are who
they say they are.  That said, I need to do an even better job of
emphasizing that their Delancey password *should not* be the same as
their del.icio.us password.  (I only store a one-way hash of it
anyway, but I don't want to even come close to the del.icio.us
password.)

As far as del.icio.us adding this functionality -- cool.  It would
obviate the need for Delancey, of course, but del.icio.us is clearly
the best place for this functionality.  As it stands, I think Delancey
is best considered a useful tool and tech demo and a testament to the
power of the openness of del.icio.us.

Interestingly, I didn't use the del.icio.us API at all in building
Delancey.  Not that I didn't try, but it turned out that I got far
more mileage out of the JSON feeds and form POSTs than I did with the
API.

I'm all in favor of your ideas about a way of proxy authentication. 
Check out OpenID -- there may be some potential in there. 
Coincidentally, I'm working on a generic distributed identity engine
as my next project on unto.net, and I'm definitely going to expose
parts of it as OpenID.

Best,

-DeWitt




On 11/29/05, joshua schachter <[EMAIL PROTECTED]> wrote:
> DeWitt Clinton wrote:
>
> >Hi,
> >
> >I recently ran across the delicious-discuss thread on keeping track of
> >which links are clicked on most frequently.  As it turns out, I just
> >released a client/server application called Delancey that enhances
> >del.icio.us to do just that.  I'll be posting the technical details
> >regarding the implementation and source code in the next day or two,
> >but until then, you may want to simply try it out and see.
> >
> >The Delancey application can be found at:
> >
> > http://delancey.unto.net/
> >
> >Suggestions and comments always appreciated.  Thanks, and best regards!
> >
> >
>
> Looks neat. Some observations:
>
> 1) I'm still freaked out about putting my userid and password into
> random forms.
> I floated this proposal earlier:
> http://lists.del.icio.us/pipermail/discuss/2005-September/003912.html
>
> 2) We are planning to do click-tracking in delicious after the current
> round of changes are done. Presumably this will be exposed via the API.
>
> Joshua
>
> --
> joshua schachter
> [EMAIL PROTECTED]
> http://del.icio.us/joshua
>
>
_______________________________________________
discuss mailing list
[email protected]
http://lists.del.icio.us/cgi-bin/mailman/listinfo/discuss

Reply via email to