Super Volatile

Krzysztof Szafranek's link blog

Hi, I'm Krzysztof and I make websites.
When I'm not making websites, I read these.
Jan 27, 2011 / 12:31am

37signals Product Blog: We’ll be retiring our support of OpenID on May 1

Fewer than 1% of all 37signals users are currently using OpenID. After consulting with a fair share of them, it seems that most were doing so only because that used to be the only way to get single sign-on for our applications.

OpenID had a great promise, but it's seems to be clear now that it failed miserably. Pity.

Filed under: openID  
Dec 22, 2010 / 2:27pm

Open ID Is A Nightmare

People would login successfully once, pay for a subscription, then login later and the sub would be gone. Turns out that Yahoo and Google have a different idea about what Open ID is supposed to do - because the the Identifier used for these users would change based on... some voodoo (sorry, but that's all I can deduce).

All of a sudden Google (by far our most popular provider) would change the token (the encrypted value on the end of the Open ID) and boom - you're completely lost to us. We have no other way of knowing who you are - and more than once I've had to track people by their PayPal accounts (we track the transaction ids - which we can look up through PayPal to find out who you are).

Open ID was taunted to be a solution to the web authentication hassle. It turned out to introduce its own problems, however, as this story shows.

Filed under: openID   security