What is the benefit of using ONLY OpenID authentication on a site? -

-

from experience openid, see number of significant downsides:

adds single point of failure site
not failure can fixed site if detected. if openid provider down 3 days, recourse site have allow users login , access information own?

takes user sites content , every time logon site
if openid provider not have error, user re-directed site login. login page has content , links. there chance user drawn away site go down internet rabbit hole.

why want send users company's website?
[ note: provider no longer , seems have fixed problem (for now).]

adds non-trivial amount of time signup
sign site new user forced read new standard, chose provider, , signup. standards technical people should agree in order make user experience frictionless. not should thrust on users.

it phisher's dream
openid incredibly insecure , stealing person's id log in trivially easy. [ taken david arno's answer below ]

for of downside, 1 upside allow users have fewer logins on internet. if site has opt-in openid users want feature can use it.

what understand is:
benefit site making openid mandatory?

the list of downsides misses obvious one: phisher's dream. openid incredibly insecure , stealing person's id log in trivially easy.

matt sheppard hits nail on head answer though:the benefit of using openid involves less hassle site creator there no usernames , passwords handle , no user account creation code required.


Comments

Post a Comment

Popular posts from this blog

c++ - How do I get a multi line tooltip in MFC -

-
right now, have tool tip pops when hover on edit box. problem tool tip contains multiple error messages , in 1 long line. need have each error message on own line. error messages contained in cstring new line seperating them. my existing code below. bool ontooltiptext(uint, nmhdr* pnmhdr, lresult* presult) { assert(pnmhdr->code == ttn_needtexta || pnmhdr->code == ttn_needtextw); // need handle both ansi , unicode versions of message tooltiptexta* pttta = (tooltiptexta*)pnmhdr; tooltiptextw* ptttw = (tooltiptextw*)pnmhdr; // tchar szfulltext[256]; cstring strtiptext=_t(""); uint nid = pnmhdr->idfrom; if (pnmhdr->code == ttn_needtexta && (pttta->uflags & ttf_idishwnd) || pnmhdr->code == ttn_needtextw && (ptttw->uflags & ttf_idishwnd)) { // idfrom hwnd of tool nid = ::getdlgctrlid((hwnd)nid); } //m_errprojaccel[ch] contains 1 or more error messages each...
Read more

asp.net - In javascript how to find the height and width -

-
i having .aspx , masterpage page. in masterpage loading aspx page . in aspx page design using generating table structure using code-behind server in javascript how find height , width . regards, kumar if you're looking table height , width, should it var tbl = document.getelementbyid('tbldemo'); alert(tbl.offsetwidth + '\n' + tbl.offsetheight);
Read more

c# - DataTable to EnumerableRowCollection -

-
i have datatable according client requirement can contain invalid date "00/00/1999",null,empty string.(typed datset) when collect them enumerables wish convert of invalid forms empty string. (i.e) enumerablerowcollection<datarow> query = order in _table.asenumerable() select new { orderdate= string.isnullorempty(convert.tostring(order.field<datetime>("orderdate")) || (how check date invalid date) ? string.empty : order.field<datetime>("orderdate") } how check whether date valid date or not? datetime.tryparse...like given current code: datetime date; enumerablerowcollection<datarow> query = order in _table.asenumerable() select new { orderdate= string.isnullorempty(convert.tostring(order.field<datetime>("orderdate")) || !datetime.tryparse(convert.tostring(order.field<datetime...
Read more