Journal/9 Ventôse CCXV from Evan Prodromou

Lots of short, sharp items today that I want to get down.

LinuxQuestions.org supports OpenID

First, I'm psyched to see that LinuxQuestions Wiki now supports OpenID. Jeremy gave the scoop in The LQ Wiki Now Supports OpenID.

I was glad to see that LQ's on the OpenID path. It's a really strong community site, and I think it'll benefit greatly from opening up the authentication process.

tags:

Wikia and OpenID

Angela Beesley had some comments on my Journal/7 Ventôse CCXV posting about wikiHow's support of OpenID. In that posting, I said that I thought companies with lots of wikis, like Wikia or wiki farms, might have a disincentive to participate in the OpenID network.

Angela put me straight on the issue in a post on WikiAngela about OpenID. I'm glad to hear that Wikia is considering supporting the protocol. Then again, it's hard to believe that an Open Content, Open Source company is really going to go out of its way to avoid open standards and open login.

tags:

DemoCampMontreal1

I had a good time last night at DemoCampMontreal1. I gave the first demo -- on, of course, the MediaWiki OpenID extension -- and I had some technical difficulties that didn't let me show off all the functionality. Which was kind of a bummer, but there were lots of questions about it from the audience, so that kind of made up my time.

The room was packed, by the way -- pretty much anyone who's anyone in Montreal tech was there. I'm looking forward to DemoCampMontreal2 on 29 March!

tags:

certifi.ca

One of the best ways to establish credentials on the Web is to use a signed SSL certificate in your browser. It's fast, incredibly secure, and once you get it set up you can just forget it. They're also practically immune to phishing.

Unfortunately, most people don't even know what browser certificates are, how they work, or what to do with them. Consequently, most Web sites don't support browser certificate authentication. Vicious cycle.

But, one of the cool things about OpenID is that you can disconnect the authentication method from the Web site you're using. Most OpenID identity providers still use username/password combos for authentication, which is why critics have said that the standard is vulnerable to phishing attacks.

I wanted to see if it were possible to set up an OpenID identity provider that used browser certificates as the only authentication system. So, in my copious free time, I've hacked up certifi.ca. It's based on the cool PHP OpenID Server that JanRain made, but I've ripped out all the password stuff, and now it runs on luscious certificatey goodness.

I'm going to be enhancing the service in the near future, but I wanted to get feedback from folks interested in OpenID as soon as possible. I'm using it for my primary OpenID delegate, and it seems to be working great. Please give it a try and let me know what you think (admin@certifi.ca).

tags:

DemoCampMontreal1 on Montreal Poutine

There's an article on DemoCampMontreal1 on Midnight Poutine. That's me up on the stage, in the photo!

tags:

Nepean Hotspurs Selects win

On Saturday, a Muslim girl named "Azzy" Mansour, from Ontario playing in a soccer tournament in Laval was ejected from the tournament (by a Muslim referee, notably) for wearing a hijab -- reportedly because it was a safety hazard. (Montreal Gazette story, registration required.) Admirably, her entire team forfeited the tournament in protest.

I'm not excited about Quebec's reactionary activity around Muslim, Sikh, and other religious community's different clothing rules. However, I understand that Quebecois -- and French people -- have a different idea of personal freedom than Americans. I try to be understanding and put myself in the Quebec headspace for this kind of stuff.

Mostly, though: I admire the soccer team, the Nepean Hotspurs Selects, for standing up for their teammate and their friend. A lot of teams might have gone ahead and played without her, and it took some courage to drop out of a tournament they'd had high hopes for. They're sixth-grade girls, but they've learned something about integrity that most adults never learn. Kudos to them.

tags: