OpenID: One login for all websites

1
OpenID One login for all websites
2
This presentation

• Problem
• Solution
• Technical details
• Popularity
• Demonstration
• Limitations

3
Problem

• Too many logins!

4
Solution OpenID
An open, decentralized, free framework for
user-centric digital identity. openid.net

• A single login for all sites!
• Create an OpenID identity at a site running the
  server software. Use it at a site whose
  application implements the client protocol.
• Authentication and personal data.
• Decentralized Anyone can run a server.

5
How it works

• You go to a website (blogs.com).
• It has OpenID support. Theres a textfield for
  your OpenID handle (mike.ids.com).
• The website takes mike.ids.com and checks with
  ids.com to see if youre logged in there and
  have blogs.com on your list of OK sites.
• If so, your identity is verified, and youre
  authenticated at blogs.com.

6
OpenIDs popularity

• 60 million users.
• Adopted by AOL.
• Bounty set 5000 to each of first ten major open
  source projects to use it.
• Firefox 3 may somehow support it.

7
Demonstration
8
Limitations

• Not a trust system!
• Doesnt prevent spam.

• Phishing vulnerability.
• One login stolen -gt all are stolen.

9
Thanks!