Comments on: refresh belfast – blaine cook and webfinger http://www.johngirvin.com/blog/archives/refresh-belfast-blaine-cook-and-webfinger.html Sun, 25 Jul 2010 18:09:45 +0000 http://wordpress.org/?v=2.9.2 hourly 1 By: Waleed Eissa http://www.johngirvin.com/blog/archives/refresh-belfast-blaine-cook-and-webfinger.html/comment-page-1#comment-691 Waleed Eissa Thu, 22 Apr 2010 07:18:57 +0000 http://www.johngirvin.com/blog/?p=409#comment-691 John, thanks for the great post. I have just started to read about WebFinger, which I think is very promising. I'm a little confused though by something you mentioned here: "Much like OpenID, WebFinger would allow single sign-on across sites that were modified to support it" Would you elaborate more on this? As far as I understand WebFinger works by linking meta data (things that you'd like to share publicly about yourself) to your email address (or more accurately your webfinger ID because it doesn't actually have to be an email, but it's safe to say it will be an email address in most cases). So, in short, WebFinger has nothing to do with authentication, or at least this is my understanding. From what I read elsewhere, you can have an OpenID URL in your meta data which can be used to authenticate you using OpenID. So, this means you still need OpenID. Is this what you meant when you said "(or, to be fair, OpenID)"? Thanks John, thanks for the great post. I have just started to read about WebFinger, which I think is very promising. I’m a little confused though by something you mentioned here:

“Much like OpenID, WebFinger would allow single sign-on across sites that were modified to support it”

Would you elaborate more on this? As far as I understand WebFinger works by linking meta data (things that you’d like to share publicly about yourself) to your email address (or more accurately your webfinger ID because it doesn’t actually have to be an email, but it’s safe to say it will be an email address in most cases).

So, in short, WebFinger has nothing to do with authentication, or at least this is my understanding. From what I read elsewhere, you can have an OpenID URL in your meta data which can be used to authenticate you using OpenID. So, this means you still need OpenID.

Is this what you meant when you said “(or, to be fair, OpenID)”?

Thanks

]]>