It's one of the basic tenets of online security: Never use the same password/username combo for every website that requires one. The logic is sound, of course. A single security breach could expose your most private information -- such as banking and credit card numbers -- to the bad guys.
Problem is, who can remember multiple passwords and usernames? Many times I've signed up for a service, returned to the site a few weeks later, and quickly realized that I couldn't remember my login details.
Google and other major online players, including AOL, Facebook, Microsoft Plaxo, MySpace, and Yahoo, are pitching a simpler alternative: A single password/username combo, such as your Google or Yahoo ID, for multiple sites. The concept, based on the industry standard OpenID 2.0 protocol isn't exactly new. In fact, Google announced over a year ago that it would support the single single-in plan.
However, industry support appears tepid for OpenID, as many popular sites still don't accept an OpenID login. Perhaps that's why The Official Google Blog on Tuesday beat the OpenID drum, and gave a quick run-through of how the service might benefit Facebook and Plaxo users.
A Gmail user who receives an invitation to use Facebook or Plaxo, for instance, won't have to create a new account for those services, but rather can log in using a Google ID:
As the Google Blog points out, this simplified sign-in eliminates a tedious, multistep process for Gmail users who join Plaxo. It's more secure too. Verification (in this example) is handled by Google, so Plaxo never sees your username and password. "Since you don't have to enter your password on additional sites, your password remains closer to you and is less likely to be misused," writes Google security product manager Eric Sachs.
OpenID is a great idea, but wider acceptance is needed for it to become truly useful. I suspect that Yahoo, Microsoft, and Google aren't truly comfortable with a single sign-in approach for their key properties. Today, for instance, I can't use my Yahoo ID to sign into my MSN account, nor can I use my Windows Live ID to enter Yahoo Mail.
In the mean time, I better work on my memorization skills.
Contact Jeff Bertolucci via Twitter (@jbertolucci) or at jbertolucci.blogspot.com.
Latest on Security
- Metasploit releases IE attack, but it's unreliable
- Attacks appear imminent as IE exploit is improved
- Sept. 11 pager messages published online
- Microsoft issues security advisory on IE vulnerability
- Facebook worm spreads with a lurid lure
- 'Godfather of Spam' sentenced to four years in prison
- Microsoft confirms IE6, IE7 zero-day bug
- Cyberattacks on U.S. military jump sharply in 2009
- Most security products flunk test on basic use: ICSA Labs
- 3 basic steps to avoid joining a botnet
Security Essentials
- Good security in recessionary times
- Security ROI: Fact or Fiction?
- NetWitness releases free version of security software
- Study: critical infrastructure often under cyberattack
- Crooks can make $5M a year shilling fake security software
- Sun exec: IT security should follow business needs
- Clumsy staff more dangerous than hackers: survey
- When the watchdog is the underdog
- Mafiaboy grows up; a hacker seeks redemption
- Ouch! Security pros' worst mistakes
TechWorld Jobs (beta)
Recent Jobs
TechWorld Blogs
-

TalkingTech
The view from the top of IT with TechWorld Editor Rodney Gedda
-

Entrenched
Cooking up better code, IDG's developers reveal some of their secrets
-

Broadband Voice
Darren Pauli digs in from the front line of Australia's broadband battleground
Recent blog posts
- Chromium OS source released: another way of thinking
- Dell goes Android for mobile market entrance
- And the penguin-powered Androids are off!
- Let’s give PulseAudio a chance
- No Nokia prophecy, I promise!
- KOffice 2.1 hits beta 2
- Can Linux's market share be adversely affected by the competition?
- Life begins at 40, even for the Internet
- Nokia’s N900: now we’re talking open mobility
- Seven things Windows 7 can learn from Linux
Recent comments
- that would be nice..
website
10 hours 4 min ago - can't wait to have this one!
12 hours 16 min ago - It appears to have happened
1 day 4 hours ago - Michelle's image
1 day 15 hours ago - DV9520tx had it..
1 day 15 hours ago - "All that energy came with a
1 day 17 hours ago - You might want to check out
2 days 12 hours ago - Sharepoint 2010
2 days 17 hours ago - TechWorld Jobs
3 days 3 hours ago - I'd like to see that
3 days 19 hours ago - Speaking of VMware..
3 days 21 hours ago - Development solutions are already here
4 days 15 hours ago - Mobile money transfers and commerce
5 days 1 hour ago - The solution to block bing in all browsers
5 days 5 hours ago - Employment opportunities
5 days 8 hours ago - not working aussie call
5 days 20 hours ago - T2 and bluetooth connectivity with Pioneer BTB200
6 days 2 hours ago - nComputing
6 days 10 hours ago - Transferring money with a
1 week 7 hours ago - RE: Mini laptop
1 week 1 day ago








Comments
Post new comment