Hacker News Reader

Comment by dsl | Hacker News Reader

After the horrible mess that is OAuth, is anyone really expected to give this a second look?

Well Hammer-Lahav calls it "the biggest professional disappointment of my career" on his blog[1] so I guess he's aware of that aspect (more[2]).

The Mozilla Foundation's Persona[3] looks to be further along in terms of code and in terms of other people using it[4], differences with OpenID are partially described here[5]. Regardless of quality I think someone flying solo is going to have a hard time getting ahead of Persona at this point.

[1] http://hueniverse.com/2012/07/oauth-2-0-and-the-road-to-hell...

[2] http://hueniverse.com/2012/07/on-leaving-oauth/

[3] http://identity.mozilla.com/post/32395255498/announcing-the-...

[4] http://identity.mozilla.com/post/31008721633/application-and...

[5] http://identity.mozilla.com/post/7669886219/how-browserid-di...

Yes. Because OAuth takes aim at an important problem area, so having a better go at it is important.

The barn OAuth aimed at is entirely unscratched.

And with no documentation? And frankly a nothing description of what it does or how it works even at a high level.

edit: sigh, I put my mouth before my brain sometimes. I guess I accidentally criticized someone working in the open rather than an announcement of an undocumented web protocol.

To be fair, I just came across this and thought it would interest some HN readers. I don't know that the author's made any claim that it's ready for mass consumption.

During his talk yesterday at KRT conf he said he is releasing it into the wild early so that it can be truly opensource, with discussion over pull requests and code instead of 'prose' over specs. So ya, i would say it's a good time to show HN.

Reply on news.ycombinator.com