On Thu, Dec 12, 2024 at 4:05 PM Michael Jones <michael_b_jones@xxxxxxxxxxx> wrote:
>
> > What I loathe about OpenID Connect is that it became a centralized portal controlled by three big tech providers. And that means a lot of players are never going to allow OpenID authentication to their site because that means handing their business to the Identity provider.
>
> We did a set of retrospective talks on the occasion of OpenID Connect having been final for ten years. One of the lessons taught us by the marketplace is that deployers choose simple user experience over giving people choices. We designed OpenID Connect for a world where people could choose their identity provider, including running one themselves. What predominantly got deployed instead was NASCAR screens with very few choices. Why? Because user success rates were much higher.
Yes, I was on the fringes of OpenID/1 and wanted to push for using something looking like an email address users can understand as the handle. But...
I do notice that 'what the user can understand' always seems to be something that rather suits entrenching some monopolist position.
I think we now have a second chance to fix this and get what we originally wanted. What we need is a logo that stands for use DNS ID handle...
> That, and there are plenty of deployments where there’s no choice at all. For instance, I use the AT&T identity provider when paying both my mobile phone bill and my DirecTV bill. Which is a legitimate business choice on AT&T’s part.
>
I think that is fine, up to a point.
Accountalism is a plague on the net that I hoped OpenID would save us from. Everyone forcing me to create yet another account to interact with them. Yes, of course they are going to have to check that the person with some handle is the person paying the bills for X. But I should be able to do that without the whole 'account rigmarole'.
