OpenID &Social Graph/Apps

Cédric Hüsler

Barcamp Bodensee - Friedrichshafen - May 2008

Quick Poll

•Who always use the same PW for every new account on a new site?

•Who has a blog?

•Who has an OpenID?

prove you are really who you suppose to be

Username & Password Public-Private Key Challenge-response

Authentication

Authorizationwhat are you allowed to do

ACL (Access Control List) RBAC (Role-based Access Control)

BASICS

Identity

Privacy

ability to uniquely identify yourself

Your Name Fingerprint AHV-Nr / SSN

ability to control what others know about you

Can you keep a secret? Opt-in Virtualization

BASICS

SSOSingle-Sign-On

using the same identity to access multiple

services

automatic authentication beyond

session and service

BASICS

Use a URL as user name!

www.wishlistr.com

Time for demo!

Illustration copyright by Wishlistr

http://www.wishlistr.com/

Yahoo Logo copyright by Yahoo! Inc.

http://jyte.com/

Mainstream?

what’s missing?

Demo of https://pip.verisignlabs.com/seatbelt.do

Firefox Logo copyright by Mozilla Corporation

Social Graph

http://socialgraph-resources.googlecode.com/svn/trunk/samples/findcontacts.htmlPhoto: Gustavo

New!

Google Logo copyright by Google Inc.

That’s itGot it?

My blog: keepthebyte.ch Slides on www.slideshare.net/keepthebyte