OpenID & Mozilla, Sittin’ in a tree

Alright, so there wasn’t any actual kissing going on, but there was a great meeting on OpenID and Firefox 3.0 at Mozilla this afternoon. We’ve heard that Mozilla was interested in supporting OpenID in Firefox 3.0, but what does that really mean?

I had a previous meeting and arrived late but was glad that some really good discussion was going on about how OpenID could interact with Mozilla. Thanks so much Alex Faaborg and Chris Messina for convening the meeting on such short notice!

What was the outcome? Well, we (as in the OpenID community) need to do some blue sky work. What would we like to see in Firefox 3.0 that would make OpenID better? More secure? More obvious? I’m floating that question out to the OpenID general list right now. Bear in mind, its not guaranteed that we’ll get this implemented in Firefox 3.0. However, if we can clearly identify what we’d like to see as a community, then that might go a long way in helping Mozilla implement it.

For me personally, I’d love to see better support for anti-phishing built into the browser. Something like core integration of the ph-off extension. ph-off allows the user to define who their identity provider is and then it modifies the chrome in Firefox any time you’re entering a password. If the browser turns green, you’re in good shape. If the browser turns red, something bad is happening. This may not be the best paradigm to use, but I like the idea of some seamless bits of code at the end-user machine that helps secure it further and fix the phishing problem.

What would you like to see?