Comments on: Identity and control http://hereinthehive.com/2008/05/04/identity-and-control/ Occasional blog of Dan Donald, a web developer in Manchester UK Mon, 30 Aug 2010 20:33:02 +0000 http://wordpress.org/?v=2.9.1 hourly 1 By: Paid writing http://hereinthehive.com/2008/05/04/identity-and-control/comment-page-1/#comment-480 Paid writing Sun, 30 May 2010 05:22:27 +0000 http://www.hereinthehive.com/2008/05/04/identity-and-control/#comment-480 Hi, nice writing. Want to get cash for blogging? Check out: http://bit.ly/PaidWriting Hi, nice writing. Want to get cash for blogging? Check out: http://bit.ly/PaidWriting

]]> By: dan http://hereinthehive.com/2008/05/04/identity-and-control/comment-page-1/#comment-22 dan Mon, 05 May 2008 22:45:11 +0000 http://www.hereinthehive.com/2008/05/04/identity-and-control/#comment-22 Thanks for the comment, Dave. It seems like the majority of the community interested in this stuff is wondering how we can do this in technical terms so I think opening the debate into a more practical space is in order. Having a service to make signing into websites easier is great but that could so easily be a small step into something akin to a passport (not lie Microsoft's Passport!). Something that does actually profile you in a meaningful way should be treated with almost the same security and uptime as a bank BUT as many sites could be polling for data, the bandwidth demands could make identity hosts a different prospect. It's all food for thought ;) Thanks for the comment, Dave.

It seems like the majority of the community interested in this stuff is wondering how we can do this in technical terms so I think opening the debate into a more practical space is in order.

Having a service to make signing into websites easier is great but that could so easily be a small step into something akin to a passport (not lie Microsoft’s Passport!). Something that does actually profile you in a meaningful way should be treated with almost the same security and uptime as a bank BUT as many sites could be polling for data, the bandwidth demands could make identity hosts a different prospect.

It’s all food for thought ;)

]]> By: Dave Stevens http://hereinthehive.com/2008/05/04/identity-and-control/comment-page-1/#comment-21 Dave Stevens Mon, 05 May 2008 08:58:52 +0000 http://www.hereinthehive.com/2008/05/04/identity-and-control/#comment-21 I'm pretty much torn between the different options. I hate having to remember a bunch of different logins, especially as I can never seem to remember which password is which at the critical moment. I also really like integration, so while I like to use multiple services (twitter, pownce, etc) I then link them all together in one place for consuming them. However the concern I have always revolves around the same few points: 1. If I have one single place where access is controlled to all services I use, how can I be sure that this particular service will always be available? 2. If everything's in one place, one security compromise = a whole host of problems. 3. Can I *really* trust anyone with that much access? I'm sure the people behind oAuth/openID/etc are noble and well intentioned, but it would only take one renegade employee/volunteer to make things difficult for me, if I were to put all my eggs in their basket. I guess the summary of my position right now would be: like the idea, not convinced we have a suitably robust implementation to make it a possibility just yet. I’m pretty much torn between the different options. I hate having to remember a bunch of different logins, especially as I can never seem to remember which password is which at the critical moment. I also really like integration, so while I like to use multiple services (twitter, pownce, etc) I then link them all together in one place for consuming them.

However the concern I have always revolves around the same few points:
1. If I have one single place where access is controlled to all services I use, how can I be sure that this particular service will always be available?

2. If everything’s in one place, one security compromise = a whole host of problems.

3. Can I *really* trust anyone with that much access? I’m sure the people behind oAuth/openID/etc are noble and well intentioned, but it would only take one renegade employee/volunteer to make things difficult for me, if I were to put all my eggs in their basket.

I guess the summary of my position right now would be: like the idea, not convinced we have a suitably robust implementation to make it a possibility just yet.

]]> By: How far do we want to put our identities online? | Here in the Hive http://hereinthehive.com/2008/05/04/identity-and-control/comment-page-1/#comment-20 How far do we want to put our identities online? | Here in the Hive Sun, 04 May 2008 21:25:09 +0000 http://www.hereinthehive.com/2008/05/04/identity-and-control/#comment-20 [...] is kind of a follow on to my previous post about identity on the web and data portability.�  One thing I have been thinking about for a while [...] [...] is kind of a follow on to my previous post about identity on the web and data portability.�  One thing I have been thinking about for a while [...]

]]>