Recommended
Recommended
More Related Content
What's hot
What's hot (20)
Similar to The web beyond "usernames & passwords"
Similar to The web beyond "usernames & passwords" (20)
More from Francois Marier
More from Francois Marier (19)
Recently uploaded
Recently uploaded (20)
The web beyond "usernames & passwords"
- 1. the web beyond usernames & passwords François Marier – @fmarier
- 3. security
- 10. bcrypt
- 14. conversion rate
- 15. # hits signup
- 16. # hits signup signup_complete
- 17. # hits lost cust- omers signup signup_complete
- 23. distributed
- 24. distributed privacy-sensitive
- 25. distributed privacy-sensitive simple
- 26. distributed privacy-sensitive simple open source
- 27. how does Persona work?
- 29. getting a proof of email ownership
- 30. getting a proof of email ownership authenticate?
- 31. getting a proof of email ownership authenticate? public key
- 32. getting a proof of email ownership authenticate? public key signed public key
- 33. you have a signed statement from your provider that you own your email address
- 38. logging into a 3rd party site
- 39. logging into a 3rd party site assertion wikipedia.org Valid for: 2 minutes
- 40. logging into a 3rd party site assertion wikipedia.org Valid for: 2 minutes check audience
- 41. logging into a 3rd party site assertion wikipedia.org Valid for: 2 minutes check audience check expiry
- 42. logging into a 3rd party site assertion wikipedia.org Valid for: 2 minutes check audience check expiry check signature
- 43. logging into a 3rd party site assertion public key wikipedia.org Valid for: 2 minutes
- 44. logging into a 3rd party site assertion wikipedia.org Valid for: 2 minutes
- 45. logging into a 3rd party site assertion session cookie
- 46. how much work does it take?
- 47. only 75 lines
- 48. only 75 lines html – js – python
- 51. navigator.id.watch({ loggedInEmail: “francois@mozilla.com”, onlogin: function (assertion) { $.post('/login', {assertion: assertion}, function (data) { // do something } ); }, onlogout: function () { window.location = '/logout'; } });
- 52. navigator.id.watch({ loggedInEmail: “francois@mozilla.com”, onlogin: function (assertion) { $.post('/login', {assertion: assertion}, function (data) { // do something } ); }, onlogout: function () { window.location = '/logout'; } });
- 53. navigator.id.watch({ loggedInEmail: null, onlogin: function (assertion) { $.post('/login', {assertion: assertion}, function (data) { // do something } ); }, onlogout: function () { window.location = '/logout'; } });
- 54. navigator.id.watch({ loggedInEmail: null, onlogin: function (assertion) { $.post('/login', {assertion: assertion}, function (data) { // do something } ); }, onlogout: function () { window.location = '/logout'; } });
- 55. navigator.id.watch({ loggedInEmail: null, onlogin: function (assertion) { $.post('/login', {assertion: assertion}, function (data) { window.location = '/'; } ); }, onlogout: function () { window.location = '/logout'; } });
- 60. navigator.id.watch({ loggedInEmail: null, onlogin: function (assertion) { $.post('/login', {assertion: assertion}, function (data) { window.location = '/'; } ); }, onlogout: function () { window.location = '/logout'; } });
- 61. navigator.id.watch({ loggedInEmail: null, onlogin: function (assertion) { $.post('/login', {assertion: assertion}, function (data) { window.location = '/home'; } ); }, onlogout: function () { window.location = '/logout'; } });
- 62. def verify_assertion(assertion): page = requests.post( 'https://verifier.login.persona.org/verify', Data={ "assertion": assertion, "audience": 'http://123done.org'}) data = page.json return data.status == 'okay'
- 63. { status: “okay”, audience: “http://123done.org”, expires: 1344849682560, email: “francois@mozilla.com”, issuer: “login.persona.org” }
- 67. navigator.id.watch({ loggedInEmail: null, onlogin: function (assertion) { $.post('/login', {assertion: assertion}, function (data) { window.location = '/home'; } ); }, onlogout: function () { window.location = '/logout'; } });
- 68. 1. load javascript library
- 69. 1. load javascript library 2. setup login & logout callbacks
- 70. 1. load javascript library 2. setup login & logout callbacks 3. add login and logout buttons
- 71. 1. load javascript library 2. setup login & logout callbacks 3. add login and logout buttons 4. verify proof of ownership
- 74. { status: “okay”, audience: “http://123done.org”, expires: 1344849682560, email: “francois@eyedee.me”, issuer: “eyedee.me” }
- 76. { status: “okay”, audience: “http://123done.org”, expires: 1344849682560, email: “francois@mozilla.com”, issuer: “mozilla.com” }
- 77. { status: “okay”, audience: “http://123done.org”, expires: 1344849682560, email: “francois@mozilla.com”, issuer: “login.persona.org ” }
- 80. support for all email providers
- 82. navigator.id.*
- 84. support for all modern browsers >= 8
- 88. =
- 89. Persona is open for business!
- 90. To learn more about Persona: https://login.persona.org/ http://identity.mozilla.com/ https://developer.mozilla.org/en-US/docs/BrowserID/Why_BrowserID https://developer.mozilla.org/en-US/docs/BrowserID/Quick_Setup https://github.com/mozilla/browserid-cookbook/tree/master/python https://github.com/mozilla/browserid/wiki/BrowserID-Libraries https://github.com/mozilla/django-browserid http://123done.org/ @fmarier http://fmarier.org
- 91. Photo credits: Laptop password: https://secure.flickr.com/photos/reidrac/4696900602/ Top 500 passwords: http://xato.net/passwords/more-top-worst-passwords/ Parchment: https://secure.flickr.com/photos/27613359@N03/6750396225/ © 2012 François Marier <francois@mozilla.com> This work is licensed under a Creative Commons Attribution-ShareAlike 3.0 New Zealand License.