Comments on: Coming Soon: No More Passwords Giveaways!

By: Snyke

Snyke — Tue, 03 Feb 2009 13:58:45 +0000

I just love the comparison on the OAuth webpage:

Imagine that OpenID is like your car key: you have to be at the website to log in. OAuth is like a valet key: you can hand to a website to operate on your behalf, even when you're not there. ^^

By: markevans

markevans — Sun, 25 Jan 2009 22:13:49 +0000

Chris,

Thanks for the clarification.

cheers, Mark

By: Chris Messina

Chris Messina — Sun, 25 Jan 2009 21:52:53 +0000

Just wanted to clarify something about what you said. OAuth is not about using a "universal ID to use third-party applications". Instead, it's merely about substituting an application key and a token in place of your username and password. OpenID more about a universal ID — so OAuth and OpenID are complementary.

An easier way to think about this is that OAuth is about what you can do, whereas OpenID is about who you are.

By: markevans

markevans — Sun, 25 Jan 2009 12:45:46 +0000

To me, it's been a necessary evil to hand over my username and password if I want to try/use most Twitter-related services. That said, I've changed my PW a lot recently.

By: felipecoimbra

felipecoimbra — Sun, 25 Jan 2009 05:41:09 +0000

I don't now how they got away with this for so long… I have never used any twitter app that requires password and I would never develop one that would ask for users password either.