Martin Atkins (mart) wrote in apparentlymart,
Martin Atkins

Yahoo! embraces OpenID... but 2.0 only

I'm far too late to be merely blogging about the Yahoo! OpenID announcement -- everyone else has already been propagating it well -- but I do want to comment on it.

As many people have noticed by now, Yahoo!'s provider implementation only supports consumers (or relying parties, if you want) that talk the Auth 2.0 protocol. Technically the 2.0 spec allows providers to shun 1.1, but it's not recommended for the reason that I'm sure will become obvious once Yahoo! launches: there's no way for your average end-user to distinguish between a 1.1 and a 2.0 implementation.

Many of the more popular sites have been tracking the development of 2.0 quite closely, so in most cases this will not be an issue. However, LiveJournal and clones thereof continue to support only 1.1 both in their server and relying party implementations. This is quite unfortunate, since LiveJournal is credited as being not only the first implementation of OpenID but also the place OpenID came from, and is possibly going to be one of the first places people look to try out their new Yahoo!-provided OpenID identifier.

LiveJournal's implementation is based on Brad Fitzpatrick's original Net::OpenID package from CPAN, which has unfortunately been somewhat neglected since LiveJournal's OpenID support shipped all those years ago. The guys at JanRain have since done a wonderful job of writing fully-featured libraries in a variety of languages, including Perl. I'm in two minds as to whether it would be better to work on retrofitting Net::OpenID with 2.0 support, which would allow LiveJournal to adopt it unmodified, or to work on making LiveJournal talk to JanRain's Perl OpenID library and eliminate the need for redundantly maintaining two largely-equivalent libraries.

Regardless of the approach, I do think it's important that LiveJournal make the move to 2.0 before Yahoo! releases its OpenID support on the 30th, or a lot of users are going to have a negative experience when they try to log in to LiveJournal with their Yahoo! ID.


  • HTML 5 vs. Yadis

    One of the ways that the Yadis specification allows for the XRDS document location to be declared is via the X-XRDS-Location header embedded via a…

  • Version Targetting for IE8 and beyond

    On A List Apart today is an article on how IE8 will selectively enable its new rendering engine. The executive summary is that pages will now be…

  • Apple asserts patents over “canvas” element

    According to a message apparently sent from Apple's patent department, Apple is asserting patents over the “canvas” HTML element. This element was…

  • Post a new comment


    default userpic

    Your reply will be screened

    Your IP address will be recorded 

    When you submit the form an invisible reCAPTCHA check will be performed.
    You must follow the Privacy Policy and Google Terms of use.
  • 1 comment