Rated 5 out of 5 stars
really works well keep up the great work
Rated 4 out of 5 stars
Needs a better explanation of how to "setup/use" this, In short:
It will ask to remember your openID upon first use of any of your openID's.
It will auto-login using your currently/last select openID to any website with openID input, when you click the icon in adressbar.
It will *not* let you choose which openID to use on the website, use the extension page "options" to change the one used!
Yes, a page(tab) after install with more detail would be good. But in this case its better to have it on the page you view inside FF for the addon...
Use the "KISS" method. (KISS=Keep It Stupid Simple) :D
thanks for your comments. You are right. My assumption that the user notices the openid icon in the url-bar and that he will click on it to find the "option" (which leads to the setup) might be overly optimistic.
I could open a web page explaining the setup after the installation. What do you think?
BTW: if you ctrl-click the openid icon in the urlbar then you can choose between the stored openids. Each openid has an individual icon and a name to make it easier to find the appropriate one for the current openid consumer.
Rated 5 out of 5 stars
I believe Web security is like within a submarine, it requires (how do you say in English, "compartimentage" ?) ... partitioning ?
This is why I will never ever concentrate whatever IDs, logins in an OpenID. Never. But it remains better to use OpenID with one very strong password than to not use it and have multiple plain crappy passwords, for sure.
5 stars nevertheless because my comment is in a way biased.
Multiple OpenID providers / user's choice
I agree that a site with third party login should allow multiple identity providers. Translated to OpenID: An OpenID consumer should allow its customers to associate multiple OpenIDs with one account. Some OP support strong authentication so we can get rid of passwords. This way we get a better web through user choice. Putting all eggs in one basket is usually not a good idea. If the identity provider fails then both users and service providers suffer. Multiple OpenIDs with strong authentication are the way to go!
Two OpenID plugins Rated 4 out of 5 stars
Would be good to unify this with the existing Firefox OpenID plugin somehow:
Allowing web-sites to query your preferred OpenID sounds like a privacy risk, though.
I sent an email to info (at) it-innovation.soton.ac.uk but did not get a reply. Yes, let's talk about joining forces.
Regarding the API the addon is providing: This is implemented like the W3C geolocation API. The preferred openid is only provided to the web-site after the user has given their consent.