The DiSo Project & The Open Web: Managing Identity on the Social Web

The DiSo Project
& The Open Web

Chris Messina December 6, 2008
Do it with Drupal New Orleans

“Low hills closed in on either side as the
train eventually crawled on to high,
tabletop grasslands creased with snow.
Birds ﬂew at window level. I could see
lakes of an unreal cobalt blue to the north.
The train pulled into a sprawling rail
yard: the Kazakh side of the Kazakhstan-
China border.

. . .

“Workers unhitched the cars, lifted them,
one by one, ten feet high with giant jacks,
and replaced the wide-gauge Russian
undercarriages with narrower ones for
the Chinese tracks. Russian gauges, still
in use throughout the former Soviet
Union, are wider than the world standard.
The idea was to the prevent invaders from
entering Russia by train. The changeover
took hours.”

— Robert D. Kaplan, The Ends of the Earth

“Data is the new Intel Inside.”

Photo credit: Adam Tinworth

the battle for the future of the social web has begun

it’s ultimately about freedom
through ensuring your ability to choose

➽ bands

➽ college students

➽ professionals

➽ everyone!

➽ everyone!

➽ everyone!*

Source: Mick Hagen (mickhagen.com)

the web citizen has provenance

Plaxo Pulse (importing Flickr)

How much are your username
and password worth?

 PC Load Letter?! What the f...!

And yet people throw them
around as though they were.

Fortunately there’s a solution.

factoryjoe@twitter.com to
walkah@identi.ca?

factoryjoe.com to
walkah.com?

linkedin.com/mom to
myspace.com/son
&
facebook.com/daughter

???

factoryjoe.com to
504.581.1000?
etc

imagine drupal.org enabling
people to “join” projects but
maintain their proﬁles elsewhere.

imagine these people listing the
projects they’ve joined on their proﬁles.

imagine “joining” a project
just by linking to it.

Chris tweeted Niches bitches! from SMS

Chris bought The Matrix from Amazon.com

the open stack is a series of building blocks
for enabling cross-site social networking
using non-proprietary formats and protocols

convenience
fewer passwords
increasing industry support

MySpace, Google, Yahoo,
AOL, Flickr, etc...

consider using OAuth to enable
third-party access to user data
without requiring passwords

OAuth can also be used for user
veriﬁcation — similar to OpenID but
without a claimed ID — you end up
with a token for the user

<!DOCTYPE html PUBLIC quot;-//W3C//DTD XHTML 1.0 Strict//ENquot;
quot;http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtdquot;>
<html xmlns=quot;http://www.w3.org/1999/xhtmlquot; dir=quot;ltrquot; lang=quot;en-USquot; xml:lang=quot;en-USquot;>
<head profile=quot;http://gmpg.org/xfn/11quot;>
<title>
willnorris.com | managing identity
</title>
<meta http-equiv=quot;content-typequot; content=quot;text/html; charset=utf-8quot; />
<meta name=quot;descriptionquot; content=quot;I’ve moved things around a bit… my blog is now located at /blog and my combined activity
stream is now located here on the front page. On December 11, 2008 willnorris tweeted,quot; by=quot;accidental"quot; i=quot;quot; meant=quot;quot;
that=quot;quot; it=quot;quot; a=quot;quot; concious=quot;quot; decision=quot;quot; to=quot;quot; add=quot;quot; openid.=quot;quot; intensedebate=quot;quot; just=quot;quot; happened=quot;quot; to=quot;quot; have=quot;quot; it=quot;quot; />

<link rel=quot;stylesheetquot; type=quot;text/cssquot; href=quot;http://willnorris.com/wordpress-content/themes/willnorris/style.cssquot; />

<meta http-equiv=quot;X-XRDS-Locationquot; content=quot;http://willnorris.com/?xrdsquot; />
<meta http-equiv=quot;X-Yadis-Locationquot; content=quot;http://willnorris.com/?xrdsquot; />

<link rel=quot;alternatequot; type=quot;application/rss+xmlquot; href=quot;http://willnorris.com/feedquot; title=quot;willnorris.com Posts RSS feedquot; />
<link rel=quot;alternatequot; type=quot;application/rss+xmlquot; href=quot;http://willnorris.com/comments/feedquot; title=quot;willnorris.com Comments
RSS feedquot; />
<link rel=quot;pingbackquot; href=quot;http://willnorris.com/wordpress/xmlrpc.phpquot; />

<?xml version=quot;1.0quot; encoding=quot;UTF-8quot; ?>
<xrds:XRDS xmlns:xrds=quot;xri://$xrdsquot; xmlns=quot;xri://$xrd*($v*2.0)quot; xmlns:simple=quot;http://xrds-simple.net/core/1.0quot;
xmlns:openid=quot;http://openid.net/xmlns/1.0quot;>
<XRD xml:id=quot;mainquot; version=quot;2.0quot;>
<Type>xri://$xrds*simple</Type>


<Service priority=quot;10quot;>
<Type>http://specs.openid.net/auth/2.0/return_to</Type>
<URI>http://willnorris.com/wordpress/wp-admin/users.php</URI>
<URI>http://willnorris.com/wordpress/wp-admin/profile.php</URI>
<URI>http://willnorris.com</URI>
<URI>https://willnorris.com/wordpress/wp-login.php</URI>
</Service>


<Type>http://specs.openid.net/idib/1.0/login</Type>
<URI simple:httpMethod=quot;POSTquot;>https://willnorris.com/wordpress/wp-login.php</URI>
</Service>


<Type>http://specs.openid.net/idib/1.0/indicator</Type>
<URI>http://willnorris.com/wordpress/?openid_check_login</URI>
</Service>


<Type>http://specs.eaut.org/1.0/mapping</Type>
<URI>http://willnorris.com/wordpress/?eaut_mapper=1</URI>
</Service>


<Type>http://specs.openid.net/auth/2.0/signon</Type>
<Type>http://openid.net/extensions/sreg/1.1</Type>
<Type>http://openid.net/sreg/1.0</Type>
<URI>http://willnorris.com/wordpress/?openid_server=1</URI>
<LocalID>http://willnorris.com/author/will/</LocalID>
</Service>


<Type>http://openid.net/signon/1.1</Type>

Drupal should advertise all
of its available services and
their respective endpoints
using XRDS-Simple

Drupal should also advertise all
of a user’s speciﬁc services
using XRDS-Simple

bring your friends with you
and take them with you
when you leave

This is 50% of the solution to the
password anti-pattern.

The other 50% is OAuth.
Fortunately, PoCo requires OAuth.

For Drupal sites that want
to enable people to invite
their friends in a safe way,
PoCo is the solution

For user proﬁle schema, Drupal
should use the PoCo schema to
achieve wide compatibility

test harness
hcard to vcard to PoCo
Plaxo is an early PoCo provider

<?xml version=quot;1.0quot; encoding=quot;UTF-8quot;?>
<xrds:XRDS
xmlns:xrds=quot;xri://$xrdsquot;
xmlns:openid=quot;http://openid.net/xmlns/1.0quot;
xmlns=quot;xri://$xrd*($v*2.0)quot;>
<XRD version=quot;2.0quot;>
<Type>xri://$xrds*simple</Type>
<Service>
<Type>http://portablecontacts.net/spec/1.0</Type>
<URI>http://pulse.plaxo.com/pulse/pdata/contacts</URI>
</Service>
<Type>http://specs.openid.net/auth/2.0/signon</Type>
<Type>http://schemas.openid.net/pape/policies/2007/06/phishing-resistant</Type>
<Type>http://openid.net/srv/ax/1.0</Type>
<URI>http://www.myopenid.com/server</URI>
<LocalID>http://brian.myopenid.com/</LocalID>
</Service>
</XRD>
</xrds:XRDS>

some challenge with
XML-RPC and OAuth

Consider wider support for
publishing to Drupal with ATOM

but webpages can be feeds too!

And as we saw with the jQuery
talk, you can do powerful stuff
with just HTML and javascript!

hCard for people
hCalendar for events
XFN for identity & social graphs
hAudio for music
...etc...

<a href=“http://factoryjoe.com”
>My site</a>
<a href=“http://brynnevans.com”
>Brynn</a>

<a href=“http://factoryjoe.com”

rel=“me”>My site</a>
<a href=“http://brynnevans.com”

rel=“friend met sweetheart”>Brynn</a>

paved cowpaths of microformats

Source: Paul Downey. Shared under Creative Commons.

it’s good for search engines
and it’s good for designers
why not for Drupal?

Start with syndicating
structured data in ATOM
using microformats

Microformats complement other
semantic efforts within Drupal.

Start with POSH.

<entry>
<id>tag:photopanic.example.com,2008:activity01</id>
<title>Geraldine posted a Photo on PhotoPanic</title>
<published>2008-11-02T15:29:00Z</published>
<link rel=quot;alternatequot; type=quot;text/htmlquot;
href=quot;/geraldine/activities/1quot; />
<activity:verb>
http://activitystrea.ms/schema/1.0/post
</activity:verb>
<activity:object>
<id>tag:photopanic.example.com,2008:photo01</id>
<title>My Cat</title>
<published>2008-11-02T15:29:00Z</published>
href=quot;/geraldine/photos/1quot; />
<activity:object-type>
tag:atomactivity.example.com,2008:photo
</activity:object-type>
<source>
<title>Geraldine's Photos</title>
<link rel=quot;selfquot; type=quot;application/atom+xmlquot;
href=quot;/geraldine/photofeed.xmlquot; />
href=quot;/geraldine/quot; />
</source>
</activity:object>
<content type=quot;htmlquot;>
<p>Geraldine posted a Photo on PhotoPanic</p>
<img src=quot;/geraldine/photo1.jpgquot;>
</content>
</entry>

ﬁltering, coalescing, search, automation

openid
oauth
poco
discovery

groups
pubsub
legal framework
UX design

need help on oauth
xrds-simple
permissions framework

The DiSo Project & The Open Web: Managing Identity on the Social Web

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Viewers also liked

Viewers also liked (20)

Similar to The DiSo Project & The Open Web: Managing Identity on the Social Web

Similar to The DiSo Project & The Open Web: Managing Identity on the Social Web (20)

More from Chris Messina

More from Chris Messina (20)

Recently uploaded

Recently uploaded (20)

The DiSo Project & The Open Web: Managing Identity on the Social Web