Why the world needs OpenID (and why it shouldn’t be totally universal)
OpenID is making big news lately, with companies such as Technorati, AOL, WordPress, and Microsoft behind it. This is nice and dandy, but how does it really benefit the typical, casual, internet user? A lot of people that I know, that claim to be ‘web 2.0‘-savvy, have dozens, or even hundreds, of accounts spread across multiple websites, with a large number of that comprised of simply registering an account to test out a new web 2.0 service. So, it isn’t too difficult to imagine that the need for OpenID is high in this particular space.
What about everyone else?
But, what about everyone else, who don’t have as many accounts spread across as many websites? I’ve talked to several people, and for a long time now, I know that they find it stressful to even have to remember a handful of passwords; for their email, Amazon, Yahoo, etc.
Today, actually, the topic of OpenID came up during lunch with a few friends who weren’t aware of any ‘web 2.0 movement’ going on, so it’s fairly safe to say that they are your typical web user. They were talking about how they have to memorize so many different usernames and passwords for different sites that they use, including Gmail, Google Calendar, and Flickr. This was when I brought up the solution of OpenID and how can it benefit us all, and I talked about the general spiel, such as how you can basically use a universal login for several websites without memorizing a separate username and password for each one.
Isn’t a universal login UNSAFE?
And then, one of my friends brought up the issue of using OpenID for banks, administration sites, corporate pages, and any other sites that require higher levels of security. What people need to understand is that OpenID will never be a totally universal login system – not the way it is now, anyways. It is definitely useful if it were to be implemented on such sites like email sites, photo sharing, social networks, etc. but that’s generally as far as it should go; corporate, admin backends, and any other sites with more sensitive data should still use their own login systems (which I’m pretty certain that they will continue doing that, but some people need to understand that OpenID won’t be taking over those responsibilities). It’s just common sense, too!
All in all, though, it’s great to finally see OpenID being adopted by so many websites. I’m currently working on an admin backend for some of my own sites, and those will definitely have their own login systems, but I’m also looking to implement OpenID in some of my own websites that allow open registration to the public, in conjunction with the already existing registration method.