It's one of the basic tenets of online security: Never use the same password/username combo for every website that requires one. The logic is sound, of course. A single security breach could expose your most private information -- such as banking and credit card numbers -- to the bad guys.
Problem is, who can remember multiple passwords and usernames? Many times I've signed up for a service, returned to the site a few weeks later, and quickly realized that I couldn't remember my login details.
Google and other major online players, including AOL, Facebook, Microsoft Plaxo, MySpace, and Yahoo, are pitching a simpler alternative: A single password/username combo, such as your Google or Yahoo ID, for multiple sites. The concept, based on the industry standard OpenID 2.0 protocol isn't exactly new. In fact, Google announced over a year ago that it would support the single single-in plan.
However, industry support appears tepid for OpenID, as many popular sites still don't accept an OpenID login. Perhaps that's why The Official Google Blog on Tuesday beat the OpenID drum, and gave a quick run-through of how the service might benefit Facebook and Plaxo users.
A Gmail user who receives an invitation to use Facebook or Plaxo, for instance, won't have to create a new account for those services, but rather can log in using a Google ID:
As the Google Blog points out, this simplified sign-in eliminates a tedious, multistep process for Gmail users who join Plaxo. It's more secure too. Verification (in this example) is handled by Google, so Plaxo never sees your username and password. "Since you don't have to enter your password on additional sites, your password remains closer to you and is less likely to be misused," writes Google security product manager Eric Sachs.
OpenID is a great idea, but wider acceptance is needed for it to become truly useful. I suspect that Yahoo, Microsoft, and Google aren't truly comfortable with a single sign-in approach for their key properties. Today, for instance, I can't use my Yahoo ID to sign into my MSN account, nor can I use my Windows Live ID to enter Yahoo Mail.
In the mean time, I better work on my memorization skills.
Contact Jeff Bertolucci via Twitter (@jbertolucci) or at jbertolucci.blogspot.com.
Latest on Security
- Alleged ransomware gang investigated by Moscow police
- WikiLeaks founder Assange questioned by Swedish police
- uTorrent patches application against DLL vulnerability
- Wikileaks' Assange to be questioned, says Swedish prosecutor
- Adobe fixes 20 vulnerabilities in Shockwave Player
- Apple fixes big security bugs in Mac OS X
- Facebook deletes North Korean account, but it resurfaces
- Apple can't stop ongoing iTunes charge scam
- Swedish prosecutor aims to decide on Assange case on Tuesday
- NBN liked, ISP filter dogs Labor in election wake
Security Essentials
- Good security in recessionary times
- Security ROI: Fact or Fiction?
- NetWitness releases free version of security software
- Study: critical infrastructure often under cyberattack
- Crooks can make $5M a year shilling fake security software
- Sun exec: IT security should follow business needs
- Clumsy staff more dangerous than hackers: survey
- When the watchdog is the underdog
- Mafiaboy grows up; a hacker seeks redemption
- Ouch! Security pros' worst mistakes
- WebSphere Solution Design (S20) - CBD, contract role3/09/2010
Other
I.T. & T
WebSphere Solution Design (S20) - CBD, contract role - Solution Architect - Web Application Architecture Project!3/09/2010
Other
I.T. & T
Solution Architect to provide strategic and operational consulting for the end-to-end Web Application System project! Experienced with J2EE or .NET?! - Principal Consultant - ITIL2/09/2010
Other
I.T. & T
Excellent opportunity for an experienced ITIL Principal Consultant to join an innovative leading IT Service management consultancy. Attractive packag - Mainframe Developer - COBOL - 12 Month Contract2/09/2010
Other
I.T. & T
Mainframe Developer - COBOL - 12 Month Contract - Business Systems Analyst2/09/2010
Other
I.T. & T
Perm CBD based role for an experienced Business Systems Analyst - Senior SAP Project Manager2/09/2010
Other
I.T. & T
Senior SAP Project Manager - SAP FICO Consultant - 6 week contract - West Sydney2/09/2010
Other
I.T. & T
SAP FICO Consultant - 6 week contract - West Sydney
Whitepapers
TechWorld Blogs
Recent blog posts
- Windows Phone 7: how big can it get?
- NBN gets a turn at political football
- Internet filter gets caught up in politics
- TechWorld Forums goes live
- Selective sourcing the hybrid of cloud services
- Social networks catch more business attention
- RIP Kin
- Telstra’s copper and NBN’s fibre: will the two ends meet?
- RIP Windows 2000, XP lives on
- Does the world need another iPhone? Why not
Recent comments
- java development
13 hours 10 min ago - When mine called they
13 hours 54 min ago - 3D TV cannot fall - no way! Why?
17 hours 7 min ago - Thanks for taking the time to
1 day 5 hours ago - Windows scam
1 day 12 hours ago - My only anti fraud method is
2 days 7 hours ago - Private Cloud Taxonomies
2 days 7 hours ago - ...however...
2 days 16 hours ago - This Guy
2 days 16 hours ago - Glasses Free technology
2 days 18 hours ago - FOSS community
3 days 45 min ago - i have dv6000 with nvidia
3 days 2 hours ago - i have dv6000 and suddenly
3 days 2 hours ago - This is an awesome comment.
3 days 6 hours ago - Real Estate
3 days 7 hours ago - Scam - eventvwr scammers
3 days 12 hours ago - Well I never...
5 days 2 hours ago - Too bad Microsoft was mentioned
5 days 4 hours ago - Phone card is a better option to make calls at a lower rate
5 days 9 hours ago - In other words: "Developers,
5 days 14 hours ago










Comments
Post new comment