OpenID &
Social Graph/Apps
Cédric Hüsler
Barcamp Bodensee - Friedrichshafen - May 2008

Quick Poll
• Who always use the same PW for
every new account on a new site?
•Who has a blog?
• Who has an OpenID?

BA
SI
C
prove you are really who you suppose to be
S
Authentication
Username & Password Challenge-response Public-Private Key
what are you allowed to do
Authorization
ACL (Access Control List) RBAC (Role-based Access Control)

BA
SI
C
ability to uniquely identify yourself
S
Identity
Your Name AHV-Nr / SSN Fingerprint
ability to control what others know about you
Privacy
Can you keep a secret? Virtualization Opt-in

BA
SI
C
S
SSO
Single-Sign-On
 
using the same identity automatic
to access multiple authentication beyond
services session and service

Use a URL as
user name!

www.wishlistr.com
Time for
demo!
Illustration copyright by Wishlistr

http://www.wishlistr.com/
Yahoo Logo copyright by Yahoo! Inc.

Mainstream?
what’s
missing?
http://jyte.com/
Demo of https://pip.verisignlabs.com/seatbelt.do
Firefox Logo copyright by Mozilla Corporation

Social Graph
http://socialgraph-resources.googlecode.com/svn/trunk/samples/findcontacts.html
Photo: Gustavo

ew !
N
Google Logo copyright by Google Inc.

ot it?
G
That’s it
My blog: keepthebyte.ch
Slides on www.slideshare.net/keepthebyte