Sign in or Join FriendFeed
FriendFeed is the easiest way to share online. Learn more »

Chris Messina › Comments

Chris Messina
The ID credentials stored on what was our phone will handle all the logins and give access to all the sites and services we use. - http://factoryjoe.tumblr.com/post...
My bank, Scandinavian bank Skandiabanken, uses the SIM card in my phone (by way of my service provider) to store an encryption key to log in to the internet bank. I just get a dial pad up on my phone when attempting to log in on the web, and enter my short master pin on the phone for this, but special SMS/texts are sent back and forth that logs me in on the web. I´m so happy to not have to do several long passwords and personal numbers on the web, or use special "calculators". - Thomas Bøhm
That's pretty sweet. This is indeed where this is likely to go... or some variation thereof. - Chris Messina
Virtualization of the telephone makes this even more interesting... - Cliff Gerrish
having written a few SMS processing apps, the SMS data is just like handling logins via HTTP with plaintext auth. Unless you can encrypt the data and fit it into 160 or so characters ... - bear (aka Mike Taylor)
Another reason for me not to have a mobile phone. Doesn't anyone worry what could happen if you were to lose your phone? - April Russo (app103)
I have to put a big DO NOT WANT on this sort of thing. My phone is a transient device which I can lose or switch at any time... I don't want it storing automagic logins to my critical financial information. - Otto
Google Voice or Ribbit - the virtualization of the phone + remote wipe. These make losing your phone less of an issue with regard to network authentication and authorization. - Cliff Gerrish
Must admit, I have been thinking of this little problem. Remote Wipe via MobileMe seems to be the best solution right now for iPhones. - Roberto Bonini from iPhone
I think a necessary step is to work through how this will implemented; it's going to happen one way or another. I hate to say it, but resistance is futile at this point. - Chris Messina
Chris Messina
RT @veganstraightedge: isn't it time for @github to be an openid provider? why can't I use my gh login everywhere I do open source stuff ...
Any favorite Open Id providers? I've been using Google, but want to use someone that does delegation with WordPress. - Crutis
I use Google, but delegate from factoryjoe.com. Why can't you delegate to Google? - Chris Messina from email
I use wordpress. - Roberto Bonini
Roberto, it's just a meta tag. Just add a meta tag into header.php. - Jesse Stay
Alternatively, the WordPress OpenID plugin will let you delegate as well: http://wordpress.org/extend... - Chris Messina
@Chris: I'm not sure what the problem is, I use the wordpress openid plugin and try to feed in the google openid url, but get back: "Unable to find any OpenID information for delegate URL https://www.google.com/account..." - Crutis
(same problem using ?id= ) Works with myopenid.com - Crutis
What are you entering for your OpenID? Have you set up your Google profile? That might help! http://profiles.google.com - Chris Messina
Yes, I set up my Google profile (though it's not public). I've been entering my Google OpenID (the same one that WordPress stores in "Your OpenIDs") for delegation but always get the error above. I get the same error if I strip the id= parameter from the URL ... it works with myOpenId though. I'm sure I'm feeding WordPress the wrong URL for google or something. - Crutis
Hmm, it could be a problem with the plugin. I'll ping @willnorris. - Chris Messina
you can't delegate to an "identifier select" provider. If you know your actual directed identifier from that provider, you can use that though. It's just an artifact of how delegation works, it has nothing to do with the plugin. You should be able to delegate to your Google profile URL though. - Will Norris
err... just read comment saying that you *were* trying your actual directed identifier. That should work, I would think. I'd have to look into it. - Will Norris
I see what I did wrong, I was trying to use https://www.google.com/account... instead of http://www.google.com/profile.... Thanks for your help guys. - Crutis
Chris Messina
@Jesse I think it depends. Early on, we wanted OAuth to be useful in non-SSL cases. Turns out, many devs don't know/get crypto/security.
No Shit. Note: I am not excepting myself. - Michael R. Bernstein
Yeah, whoda thunk it? - Chris Messina
The SSL spec itself had a recently discovered security flaw too http://securosis.com/blog... (I'm sure that's not news here). Hard security is hard :) - Micah Wittman
Software in general is hard. Security is one of those areas that freak me out. I'd hate to write an app that lets personal details slip out. The repercussions are scary.... - Roberto Bonini
I think the fact that this kind of authorization model has become more popularized over the password anti-patterns is one of the enduring successes of the OAuth project. Regardless of what happens under the covers, making it harder for users to give out their passwords and making it easier for developers to keep users safe are great outcomes. - Chris Messina
Absolutely, Chris. Educating users wasn't really getting anywhere, but shifting the default HCI protocol that sites incorporate definitely has. - Michael R. Bernstein
Chris Messina
Revolutionary use of Slashtags, new microsyntax for Twitter - http://workingviral.com/slashta...
"Thanks for the write up, Nicola. I’ve been pleasantly surprised at how both my little conventions have caught on — what was once just a little trick that I used myself became much bigger when I explained what, why, and how I was doing it! As for your proposal to add /like… I think you should start by using this convention and see if it makes sense to people, and if anyone starting imitating you. I’d also add your proposal to the microsyntax wiki: http://microsyntax.pbworks.com One point I’ll make about slashtags and pointers is just that: they’re intended to *point* at something else. In other words, they take an indirect object — whether an author, a recipient, or a source (among others). /like breaks that convention. I wonder if it wouldn’t be more readable to just add something like “*like*” to the end of your tweet? Or even just use a hashtag? (#like) In any case, feel free to add it to the wiki — and see if anyone else picks it up. Cheers!" - Chris Messina
Jesse Stay
For those of you on FriendFeed I've created an official backchannel for OpenTwitter. Subscribe at http://friendfeed.com/opentwi...
We just need a logo now - need to get Chris Messina involved to design something :-) - Jesse Stay
It´s a bit early in the morning here; is this like identi.ca (or rather status.net)? Also, using the word "Twitter" in a name and logo has posed a problem for people in the past. - Thomas Bøhm
Thomas, the name's not set yet. It was only intended as a way to describe the group - it is also not really a formal organization so I'm not sure if Twitter could do much anyway. The name is meant to describe the use of Twitter, not confuse. That said, join the group and be sure to suggest some other names - I'd love to hear everyone's input! - Jesse Stay
I am curious how this relates to Status.net and Identica? They already mirror the Twitter API... seems like amplifying that project would be one way forward? - Chris Messina
Chris, this is intended to be a Gateway. Ideally Status.net/Identi.ca could be a provider for a gateway like this. It's intended to enable any company to just pop this on a server, set some configuration variables, and any client that speaks Twitter can talk to any type of provider. It could speak RSS/Atom/PSHB/RSSCloud/Activitystrea.ms on the transport side even. I'd love to see even Twitter adopt this. - Jesse Stay
Then, ideally we can work to set some standards based on the Twitter Client-compatible side of that gateway as to how other people that want to create their own Twitter-compatible stuff (such as Identi.ca/Status.net) can implement something using the same protocol. My hope is that Twitter, too will follow. I'd love to get both Identi.ca and Twitter involved in this effort. - Jesse Stay
See my article here: http://staynalive.com/article... and @Bear's article here: http://code-bear.com/bearlog... for more background - Jesse Stay
I've also got more information on the Google Group if you read some of my posts there - Jesse Stay
Chris, I'd love your help organizing this if it's interesting to you - at a minimum we could use a good logo (and decide on a name - not sure "OpenTwitter" is the final name) - Jesse Stay
Wow. Jesse, a man of action! Wish I had time right this moment to dig in and see what it's all about. I'll be back :) - Micah Wittman
Micah, it will work best the more people we can get involved. If I'm the only one though I'm going to try and make something happen. This is heavily needed, as we're seeing with Wordpress and Tumblr now jumping in on similar (but closed) Twitter Client-compatible APIs - Jesse Stay
This should be something for everyone though - Jesse Stay
Chris Messina
Re: Joseph Smarr has new work info… - http://josephsmarr.com/2009...
"Hard to add much to what everyone else has already said, but congrats Joseph. It's been great working with you and I expect we'll be working even more closely in the future! Congrats!" - Chris Messina
Chris Messina
"This is pretty cool... And, not to pick nits, but it's "hashtag", not "hash tag" (the space makes it look a little too drug-related!)." - Chris Messina
Chris Messina
ExperienceCurve by Karl Long - http://experiencecurve.com/archive...
"No problem. If you were confused or had questions, you probably weren’t alone! Thanks for prompting me to write up some thoughts that’ve been on my mind lately! And, I’ll fix my spelling of your name… oops!" - Chris Messina
Chris Messina
ExperienceCurve by Karl Long - http://experiencecurve.com/archive...
"Thanks for your post Karl. A couple things: * Stowe Boyd deserves credit for Microsyntax. I just pitched in in the beginning and document ideas on the wiki. I didn’t start the project. * Slashtags use a forward slash (”/”) — rather than a backslash — as you have in your examples. So, a response: The concept of the slashtag was really just me documenting what *I* was doing… not necessarily intending to tell other people what to do. Hey, if people copied me, I figured, they might as well “get” what I was up to. Hence my blog post. As with hashtags, I just started using them and didn’t wait for anyone to agree with me! Now, I did take a look at what people were doing, or what conventions already existed, which is a point that you made: “My suggestion to anyone looking to build tools that tease out meaning from the conversation that is happening on twitter should look carefully at the communication and social norms that are emerging and leverage that.” When I originally proposed hashtags,..." - Chris Messina
Chris Messina
Introducing Twitterformats - http://aralbalkan.com/2807...
"Hey Aral, Thanks for the clarification. Sounds like we use the exact same process for microsyntax — fancy that! Microsyntax is essentially developed through an observe-initialize-refine-propose-iterate model, same as Twitterformats. Anyone can make a proposal, and anyone can create their own “slashtags”. Whether they get adopted is based on market penetration and adoption, as there is no central authority governing (or that *could* govern!) which tags will resonate in the wild. It does seem like Twitterformats are an attempt to define certain command-line-like actions for Twitter — though several proposals to that effect have already been made on the microsyntax wiki (though I doubt that many have really taken off). I’ll be interested to see how this effort evolves — as the microsyntax project (which was really started by Stowe Boyd — I just helped with some of the initial thinking!) is similarly intentioned! Cheers." - Chris Messina
Chris Messina
"How is this different or completely to the existing microsyntax efforts? http://microsyntax.pbworks.com" - Chris Messina
Chris Messina
WordPress.com implements the Twitter API - http://unberkeley.com/2009...
"The documentation for an API can be copyrighted — and so can the code that implements it. While the functionality of an API is usually covered by patents, there is still definitely a question of whether Twitter intends to enforce any IP protections over its API, or the design thereof.You can also copyright the design of a menu, though I doubt the content would necessarily be covered. Oh, and FWIW, recipes are one of the few things that can't be copyrighted:http://www.copyright.gov/fls..." - Chris Messina
Chris Messina
WordPress.com implements the Twitter API - http://unberkeley.com/2009...
"Indeed, Identica does clone the Twitter API, and they too are operating in a gray area. I suppose they could assume that Twitter's ambivalence towards this equals condonement, but I wonder what would happen if, say, Facebook implemented Twitter's API as well. Perhaps Twitter would love for everyone to implement their API — and perhaps they'd be happy to give it away for free. I really don't know, which is why I echoed Dewitt's question.Copyright absolutely applies to APIs — and as Dewitt pointed out in his email — Twitter reserves their right to protect their intellectual property. Given this stance, it's worth having a definitive answer as to whether their protections apply to their API.It's one thing to implement support for the Twitter API in a client; it's another to use the design of the API in a competing or related product — and not expect Twitter to have some interest in that — especially if you call it "Twitter API compatible".I'm not interested in raising a false..." - Chris Messina
"Indeed, Identica does clone the Twitter API, and they too are operating in a gray area. I suppose they could assume that Twitter's ambivalence towards this equals condonement, but I wonder what would happen if, say, Facebook implemented Twitter's API as well. Perhaps Twitter would love for everyone to implement their API — and perhaps they'd be happy to give it away for free. I really... more... - Chris Messina
Chris Messina
WordPress.com implements the Twitter API - http://unberkeley.com/2009...
"I'm curious what the answer to @dewitt's questions will be: what is the license of the Twitter API? Is it copyright infringement for Automattic to mirror it in WordPress?http://groups.google.com/group... should hope not, but it would be very useful to have this issue cleared before people standardize on what it otherwise one company's presumed IP." - Chris Messina
Chris Messina
I'm sympathetic to this take on the Facebook privacy changes, but it lacks a "global" perspective. http://trueslant.com/webtren... /by @trueslant
Except that: (1) realize the author is highly financially motivated by public sharing and public social graphs; (2) the author talks about privacy as if it's a boolean, which is just plain wrong - even in the context of Facebook alone, Facebook has had, and continues to have (though less of), some notion of levels of privacy that may differ across various kinds of information; (3)... more... - LogEx
I acknowledge the author's economic incentive, but that doesn't diminish his argument. Where is your data to support that these changes are "despite what many users want"? I imagine that people think that they want "privacy" but I actually think that many people don't understand privacy on the web — especially until it's too late. I think Facebook's changes reflect actual reality than trying to force the web to become something that it's not... - Chris Messina
I disagree. People may (informed or not, wisely or not, etc.) choose convenience at the expense of privacy, but there has been a substantial amount of news over the past few days about people upset over the new controls. It's one thing to present controls that people ignore (even though Facebook now essentially forces more open data). But it's another thing entirely to declare... more... - LogEx
I support choice, but I also think that behavior is critical to look at, especially when you're talking about technology that many people don't understand. Look — if people WANT to invite their friends to all these apps (regardless of whether their friends want them to or not) and they make their friends list private — they've now just shot themselves in the foot unknowingly. How do you... more... - Chris Messina
Chris Messina
There’s A Stranger In My Tweet House - http://www.techcrunch.com/2009...
"I reported this issue here: http://getsatis...llowing_via_sms" - Chris Messina
Chris Messina
New microsyntax for Twitter: three pointers and the slasher - http://factoryjoe.com/blog...
"@Michael Kozakewich: I’ve been meaning to redesign this blog for a while. I’ll make sure to separate the tweets from the local comments. Thanks for the suggestion." - Chris Messina
Chris Messina
Re: The Cake is a Lie: Reputation, Facebook Apps, and "Consent" User Interfaces - http://buildingreputation.com/writing...
"This is certainly a daunting problem because there's very little opportunity to "sniff an app's behind" a la dogs. This means that we have to take the app at face value, with no real anchors to interpret contextual or rating information that's supplied with it. This has several problems, especially if the reviews are used to threaten a developer: http://www.flickr.com/photos...... Furthermore, awhile back I suggested that Twitter could use social indicators in the authorization flow: http://www.flickr.com/photos...... Certainly a possibility — but doesn't do anything w/ regards whether an app "keeps it promises" (which requires some kind of meaningful enforcement)." - Chris Messina
Chris Messina
Superfeedr real-time method stats: 73% polling, 26% PubSubHubHub, 1% RSSCloud, 0% SUP: http://blog.superfeedr.com/Real-ti... /via @arjunram
poor RSSCloud, its almost a rounding error - Mark
Dave's response http://blog.rsscloud.org/post... (he claims they made the numbers up) - Mark
Knowing Julien, he didn't make these numbers up. - David Recordon
The numbers obviously depend on what feeds you're consuming. For example, SUP is enabled on YouTube and Reddit, which are a significant fraction of the feeds on on FriendFeed, but are presumably less common on superfeedr. - Paul Buchheit
Paul's comment is totally right. I think all this proves that we need to improve our 'communication' around these numbers and how they have been calculated. I will emphasize more on that in the future. - Julien
And if someone were pulling a lot of WordPress.com feeds then they'd be using RSSCloud (unless of course they were using Superfeedr's PSHB proxy: http://wordpress.superfeedr.com/). - David Recordon
In a that case, we'd be using RSSCloud to poll... As we actually do for the few wp feeds that we have. - Julien
Unfortunately PSHB is using Feedeburner numbers and Feedburner enabled PSHB feeds are NOT realtime (for the most part), because of the latency from blog to Feedburner updating. No one cares about the technology, just whether it's realtime or not. And a vast majority of that 26% are not realtime, I'd say. - Matt Terenzio
I'd also like to see some other aggregators (like Gnip) publish their numbers. Uncorroborated and without volume, it's hard to judge these, even if they are accurate. - Chris Messina
What matters is how much faster the web is. Not which protcol is a rounding error. Paul and Matt, thanks for bringing this back to reality. And btw, there are millions of sites that achieve their realtime-ness through rssCloud. As Matt says, the Feedburner feeds have a delay built into them that the rssCloud ones don't have. So it's a good question whether or not the really are realtime. The whole point is updating quickly, and they could take as much as 1/2 hour to update. - Dave Winer
Dave: Generally as long as the web is getting faster and more responsive, I don't care what protocols are used to do it. I worry, however, that if RSSCloud and PubSubHubBub were reversed in Julien's chart, that you wouldn't be discounting his findings. If so, that seems intellectually dishonest to me. Are you more upset about what Julien's numbers show or about his data collection method? - Chris Messina
Here's what I wrote about this for the community in October. "I see adoption of PubSubHubBub as a win for the Internet, and believe strongly their advocates should see adoption of rssCloud the same way. If they feel pressure from rssCloud, it should result in them more fully embracing RSS, which I felt they weren't doing when I first reviewed their efforts. Once that happens the... more... - Dave Winer
Julien, perhaps if you're publishing data like this in the future, you might want to drop the step where you "try to determine what is the best way to get [a feed's] content" and simply publish the raw stats. That is, looking at the feeds you're dealing with, which ones support which protocols? Some might support more than one, and you could illustrate that in some sort of (non-pie) chart. It seems like determining the "best" way is what opens you up to accusations of bias, etc. - Ken Sheppardson
The raw numbers do have value, IMHO, simply because as a developer I have to make choices about which protocol(s) to support. It's nice to have adoption data to feed the decision process. - Ken Sheppardson
Ken, if it would help you, let's get the adoption data. Start from the other end, what numbers do you want? Let's see if we can get them. - Dave Winer
Hopefully not data like this: http://friendfeed.com/kshep... - Dave Winer
Heh. Yeah, that's the chart I was imagining when I wrote "(non-pie) chart" above. :-) What numbers do I want? Well, I've seen the announcement-based stats, e.g. "Service X has now enabled Protocol Y on N feeds" and while I suppose those have value from a marketing standpoint, I don't think it translates directly into real, meaningful usage. The fact that some blog somebody started on some blog hosting service in 2005 that only had one post is now "real time" enabled doesn't really mean anything to me... - Ken Sheppardson
... Looking at something like Superfeedr considers a sample of feeds that people really want to follow in real time. That is, the fact that someone has said "Please tell me when Feed X updates as soon as possible" is important to me. Given a sample like that, I'd like to know which feeds support which protocols. - Ken Sheppardson
Right on. I think the fact that CNN, GigaOm and TechCrunch have realtime feeds is important (they do). And with all possible humility I think it matters that Scripting News does as well. (They all support rssCloud, btw.) I'd like to know if Chris Messina's blog is realtime. I don't care how it got to be realtime, btw. And I'd like to see FF support all the popular protocols. These things will all help boost adoption adn that's what I want to see. - Dave Winer
I hope it is! I installed the PubSubHubBub WordPress plugin (since I self-host) and seems to be working! - Chris Messina
Good for you. - Dave Winer
Again, I think the main point of the blog post was : real-time feeds (in general) are gaining traction. I will publish more details on how we measure the (raw) numbers in our December status. - Julien
Chris Messina
New microsyntax for Twitter: three pointers and the slasher - http://factoryjoe.com/blog...
"@Jack: It’s not perfect, but I use /me to add my own commentary (always the with slasher): Twitter v. Facebook http://bit.ly/7arqki /by @mjasay /me: sounds like “rather than do either, they’ll do s’thing else tht neither groks at all” I mean, you don’t need to be religious about using slashtags — they’re really just a useful way for adding more context to your post, or giving credit/pointing at people. I wouldn’t stress about “doing it wrong” — just focus on communicating clearly!" - Chris Messina
Chris Messina
An enthusiastic post, but not sure I see a clear path from here to there: "The Future Has No Log In Button http://staynalive.com/article... /by @Jesse
The path is getting people, companies, and technologies to adopt these things and getting the word out, I think - Jesse Stay
I hope you don't mind me using your image, btw - it was that post by you that inspired me to write this (although it wasn't intended as a response, just a vision). I gave credit at the bottom. - Jesse Stay
Yeah, I know that's the path — but it's *much* harder than your comment implies. I've been working on this problem for over two years, but I'm joining many more people who've been at it a decade or more already! Don't get me wrong — I'm happy to see you writing and enthusiastic about this stuff, but I think it's also important offer specific ways for your readers to dig in and help it become a reality! - Chris Messina
And yeah, no problem about using the image. Thanks for giving me credit. - Chris Messina
So, what should an individual web developer (for simplicity's sake, let's say she is building a new site) do to help this along? - Michael R. Bernstein
Michael, I'm sure Chris can give many more ways to contribute, but one way I'm working to contribute is a) bring awareness to these technologies by writing more about them and what they can do, and b) I'm going to start writing more selectors using Kynetx. You can also do things like enable your own site for OpenID, provide it as a login option, etc. I'd really love to hear Chris's suggestions too though. I'm just starting to find ways to get involved myself. - Jesse Stay
Thanks, Jesse. Chris? Any suggestions? - Michael R. Bernstein
I'll have to get back to you. Sorry to disappoint... :( - Chris Messina
Chris Messina
Re: Keep A Close Eye on Chris Messina for the Web's Future - http://blog.louisgray.com/2009...
"Wow, thanks Louis! High praise coming from someone who tracks this industry as close as you do! I think my perspective is able to mesh both my understanding and appreciation of design along with the quasi-benefit of having never worked directly *for* a big company, but having worked *with* so many. One of the things that I feel I'm able to do with many of these technologies is synthesize the goals and motivations of many different stakeholders and try to come up with something that the market will actually adopt. And since I do this with little to no resources, it means that the thing itself needs to be pretty compelling without a whole lot of hoopla or marketing! I guess my early days with Spread Firefox taught me that message. Anyway, thanks for reading my stuff and providing your thoughts on it!" - Chris Messina
Chris Messina
So, how important do you think it is to expose as much content and functionality as possible *without* requiring a login? For example, Amazon.com seems to do rather well by this tactic. - Michael R. Bernstein
Chris, you still don't seem to get that no one wants an internet identity. They want to *do* things. No one wants a driver's license, they want to drive a car. This is where the Action Card approach has much more going for it. Ideally no one should know that OpenID exists. - Cliff Gerrish
Amazon's sign-in experience is the envy if many but I'm beginning to think is often misconstrued when evaluating its effectiveness. For example, when I shop, I don't take out my wallet until I'm ready to check out. This is Amazon's model, which makes sense. In the social context, we don't interact and then when I'm about to move on, tell you my name. It doesn't work that way. Thus the model for authentication in social contexts must be different. - Chris Messina from email
Well you're half making my point! I agree that people don't "want" am Internet identity, but increasingly they *need* one to do anything of import or use. You may not *want* am email, but to send and receive messages online, you need one. ... More later. - Chris Messina from email
Chris, you're oversimplifying Amazon's model. They actually do know who you are (largely through the use of cookies) before you log in, but only when you check out do they require you to *prove* who you are (for the rest of the session). Presumably, social media sites could expose a lot more low-risk functionality and content in this same way, but only few sites do that. I've recently come across one that actually hides everything unless you have an account and are logged in. - Michael R. Bernstein
Chris, my point is to focus on "doing" rather than "being." You get an internet identity free when you *do* something. Make the "need" invisible. - Cliff Gerrish
@Michael: Sure. I agree with that. I think that we're going to have to "open up" and do more to broadcast basic profile information in order to push back the authentication/prove who you are bit to commit changes. That's kind of what I was getting at with my post, though I can understand how that might be a somewhat subtle point. - Chris Messina
@Cliff: I don't understand your point. I think I need an example. When I think of "digital identity", I'm expressly thinking of a unique ID that can be used across websites, and that isn't restricted to a single client, like a desktop machine. I need to take that identity with me to my phone, my Xbox... anywhere that the web goes. "Doing" might result in an account being created to... more... - Chris Messina
Additionally, when it comes to "Action Cards", I don't understand what the interface for picking an "action" would look like. I might be ill-informed about "Action Cards", but the content of Jesse's post and other demos that I've seen seem exceptionally superficial and hand wavy. Client-side mashups are a lot harder than the Kyntex demo lets on, and if there's no way to bring my Action Cards to my iPhone, the technology is DOA. - Chris Messina
Your iPhone *is* a selector, and an Action Card *is* an app -- the metaphor is identical. Do some research on Action Cards before you declare it dead. - Cliff Gerrish
Hrm, not sure I declared it dead, and not sure I understand how your metaphor applies. I already have many apps on my phone... each seems to want to uniquely identify me. How is each app an action card? - Chris Messina
An action card is just an app that operates across web sites. The 'identity' aspect stays with the user via the 'selector' -- not the cookie. Read Craig Burton on the selector and the cookie. http://www.craigburton.com/... - Cliff Gerrish
I think in order to use the internet with purpose the most effective way of doing that is with identity. In order for action cards to work they need identity to be part of that process. I think we're all agreeing here though. - Jesse Stay
Chris - WOW, fabulous blog post - great insights :) - Susan Beebe
Chris Messina
New Firefox 3.6 Beta Enables Local File Handling - http://www.readwriteweb.com/archive...
"This is awesome. Totally something that needs to come out of Flash and into the browser!" - Chris Messina
Chris Messina
Google Profiles Turn Into OpenIDs - http://www.techcrunch.com/2009...
"ClaimID is an OpenID provider, however, they only support the 1.1 version of the protocol — they also seem to no longer be actively maintaining ClaimID. Rather than seeing this as a “duplication”, it’s just another place to have a public profile on the web. See also: http://hi.im, http://identoo.com, http://chi.mp, and a dozen others." - Chris Messina
DeWitt Clinton
A picture of me signed in to js-kit.com with my OpenID.
jskitopenid.png
The interesting thing is that I used my personal domain, http://dewitt.unto.net/, as my OpenID, and delegated to Google as my OpenID provider. View the source of http://dewitt.unto.net/ to see how easy it was. Inspired by: http://www.flickr.com/photos... - DeWitt Clinton
I just delegated to Google too. Amazing how good that feels from an interaction perspective. Damn you Google. I just can't quit you. - Chris Messina
Thanks for this, DeWitt! I was having a hell of a time trying to reverse-engineer the OpenID providing server on my own. Nice to consolidate on my Google Profile and off my Blogger profile. - Brett Cannon
Wow this rocks! - Daniel Dulitz from iPhone
whoa all app engine apps are providers now - \(*_*)/
cool tips - mine is login.tyjak.net and it works like a charm ! thank you. - David Foucher
Doesn't it depend on the implementor whether or not they decide to store your open-ID "proxy" or the backend to which it delegates, in order to associate an ID with your account? Certainly, they have to decide which providers to trust, and unto.net probably doesn't make the list. -- myopenid.com supports CNAMES, but every consumer I've used stores the authoritative domain, and not my own cname... - Kurtiss Hare
Wonderful - Brett Slatkin
DeWitt Clinton
Does OpenID need to be hard? | FactoryCity - http://factoryjoe.com/blog...
Does OpenID need to be hard? | FactoryCity
If you read one post on OpenID and where it might go (and might need to go), start here. - DeWitt Clinton from Bookmarklet
I was nodding in agreement until the end where the suggestion is an empty text box where the user can type free-form text. I would instead suggest that the destination page should check for a cookie from Google, Yahoo, AIM, etc. and if you find a valid login cookie from (say) Yahoo, show them a login popup from Yahoo, let them log in, then send them back to the original site with Yahoo vouching for them. - Matt Cutts
Funny, I must not have read closely enough. I thought Chris was arguing against the free-form text box. I agree with you that the text box is not the way to go at all. However, a very simple browser plugin could auto-populate that behind the scenes. Even better, a plugin could obviate the step of typing in a password at the originating party completely. - DeWitt Clinton
Hmm, I'm wondering if this is something that could be hoisted via Gears. - DeWitt Clinton
How would the user FIRST indicate to the browser who their identity provider is? And no, I don't think saying "buy a Chrome OS netbook" is a valid answer. :P - Chris Messina
Matt, the cookie is dead - the selector is the future (Just my not so humble opinion) - Jesse Stay
DeWitt, you guys should seriously look into supporting information and action cards in Chrome. That would solve a lot of this problem. - Jesse Stay
Of course, as Kevin Marks said earlier today that will also depend on an <input type="openid"/> HTML 5 element being adopted into the spec - Jesse Stay
IMO in the future there will be no sign in buttons - you use your information card and it auto-provides context, logs you in, and gives you the experience you want. All via OpenID, oAuth, etc. but the user won't even know that. - Jesse Stay
Chris Messina
Google Profiles Turn Into OpenIDs - http://www.techcrunch.com/2009...
"Contrary to MG’s point — OpenID has gone mainstream, in a similar way to IMAP or SMTP. That is, it’s powering the identity and single sign-on transactions of millions of people everyday — but, to MG’s point — they just don’t know it yet. The more often you see the “sign in with your X account”, the more OpenID is creeping into the everyday web user’s experience. This is certainly a good thing, considering the fact that OpenID is an open protocol that anyone can implement. The problem is that we’re running up against what we call the “NASCAR problem” — where, because “OpenID” as a concept and brand hasn’t been well socialized — we’re putting companies and corporate brands in place of people’s names and faces. Thus, rather than signing in to leave this comment as “Chris Messina, who hosts his account with Facebook”, I would be clicking the Facebook Connect button — signing in first as a Facebook user, and second as an individual. This duality won’t scale — and requires a word to..." - Chris Messina
I think this will become visible to the users when Action cards start to be more widely available. Also, the <input type="openid"/> tag in HTML 5 will help with that. - Jesse Stay
DeWitt Clinton
Chrome OS theorists -- you're overthinking it.
Amazing to read multipage essays about the strategy of a web browser on a laptop. - DeWitt Clinton
I'd hope there'd be some kind of strategy to it! Though, if I were to take the "obvious" path, it's because people want less computer for their computing these days. And, as the video says, more people are spending more time in the browser, so...! why not just rid of all the other stuff that gets in the way? - Chris Messina
Google Chrome runs web pages and applications with lightning speed. Chrome OS runs them even faster. Faster means more users on the web. More users on the web means more users using Google. That's a pretty simple, and highly effective, strategy. - DeWitt Clinton
Well, I think the coupling of Chrome OS to specific hardware reqs is one of the more interesting things here. It gives Google a "hand to reach out into reality" in a way that it only previously had with Android/G1 devices. - Chris Messina
(As always, speaking for myself, not Google) I assume the coupling to hardware specs is the only reasonable way to guarantee sane behavior. Encouraging people to install it on arbitrary hardware would open it up to all the problems that any non-Windows OS (and sometimes even Windows) has on arbitrary hardware -- driver hell and unpredictable performance. Very similar to Apple's approach, but without the overpriced hardware. - Joel Webber
The manifestation of the Googlebot in your home will be the other “hand to reach out into reality”: http://www.ftrain.com/robot_e... - Amit Patel
Marshall Kirkpatrick
How's this for an explanation of Pubsubhubbub?
<h2>How Hubbub Works</h2> There are three parties in the Pubsubhubbub model. There's a Publisher (FeedBurner, for example), and a Subscriber (perhaps Netvibes) and the communication is facilitated through a Hub (Google's AppSpot Hub is the demo and most popular Hub so far). The publisher knows that every time new content is published it's going to notify the Hub - the Hub that gets notified will be declared at the top of the publisher's document, just like an RSS feed URL. So the Publisher delivers new content to the Hub and then the Hub will deliver that message immediately to all the Subscribers who have subscribed to recieve updates from that particular publisher. This is very different from the traditional model of a subscriber polling a publisher directly every 5 to 30 minutes (or less) to check and see if there's new content. There usually isn't and so that model is inefficient and slow. Hubbub is nearly immediate and only takes action when something important occurrs. It's... more... - Marshall Kirkpatrick
That's good! - Julien
awesome, thanks. - Marshall Kirkpatrick
Great, although Brad's kid in the backseat analogy rules. - Darren
yes, incorporating that explanation as well, thanks - Marshall Kirkpatrick
very clear explanation. spot on. - Josh Fraser
Awesome. Thanks, Marshall! - Amber Case
Pretty good. For context, I think it's important to point out that the hub in PuSH is acting as a relay. The relay is necessary largely for scaling purposes — that is, it plays a very important role, but the technology underlying the hub is extremely simple. - Chris Messina
A better example publisher would be ReadWriteWeb, rather than FeedBurner (which would likely turn into a hub itself). Let's say RWW posts a new blog post; the blogging software then pings any number of hubs with a message: "Hey, new content here". The hub says, "Great thanks," grabs the content, and then *pushes* the content to everyone on its "subscriber" list. - Chris Messina
RWW could send out those notifications itself, but it would be highly inefficient. It's better to have a hub handle and route all those notifications since that's *all* it would be doing. - Chris Messina
And, it's also not unlike SMTP ("simple mail transport protocol"). The difference is that it works over Port 80 using HTTP ("hypertext transport"), which means that you can effectively "send message to URLs" — not just email accounts! Thus, http:// status.net/chrismessina could send a message to http://twitter.com/marshallk. - Chris Messina
Chris, you're making it sound even more interesting than I was aware of. - Marshall Kirkpatrick
Marshall, I agree with you on this. Chris is indeed opening our "third-eye" on the range of use cases for this. It is a powerful "atomizing" protocol delivered with very simple underlying technology. I've been looking at XMPP, AMQP & a Comet-derivative for an application that may now be accomplished quite simply via PubSubHub / PuSH. It would also be great if Chris could also get Jyri to comment over here with his views. - http://twitter.com/AAinslie - Alexander Ainslie
Other ways to read this feed:Feed readerFacebook