Update: Lots of discussion going on all over the blogosphere about this. A couple of points I’d like to make:
- Steven is the rightful owner of openid.org and is free to do with it as he pleases.
- The offer the OpenID Foundation made to Steven for openid.org still stands.
- If the intent from the start was that Steven would run an OpenID provider, the community would never have allowed openid.org to be pointed at OpenID.net as Steven had done for many months prior to his launch of an identity provider.
Up until a few weeks ago, you could go to OpenID.org (Note: I won’t be linking to this domain in this post for reasons I’ll describe below) and get to the community site around this fantastic new single sign-on technology that so many people have put so much time and effort into creating and evangelizing. OpenID is clearly the winner in the single sign-on space and with it are coming lots of users, vendors and unfortunately, people who mean to undermine the efforts of so many.
Steven Livingstone is the current owner of the domain openid.org. He had, at the request of some members of the OpenID community, pointed openid.org at openid.net so that users who went to that domain (thinking they were getting the home of the non-profit, open source project OpenID) would be happily redirected. Several of us in the community had even engaged in conversations with Steven in hopes of securing the domain for the benefit of the community and we thought we had reached a tentative agreement that included praise on the OpenID site as well as monetary remuneration. Steven disappeared for several months with the birth of a child and change of job situation (which any of us would do) only to re-emerge a few weeks ago with a brand new project: openid.org .
openid.org is now the home to an OpenID provider that Steven runs. Steven turned off the site redirection for openid.org to openid.net and as such his new site are the benefit of quite a bit of Google juice. We were quite naive to trust Steven when he pointed openid.org at openid.net; we believed he would do the right thing and help our community out by assigning the domain over to the OpenID Foundation. So all of those blog posts that people mis-typed (see this example in the first paragraph), all of those links in blogrolls that pointed at the .org were now so conveniently pointed at Steven’s new OpenID provider. As such, if you search for ‘openid’ in Google the openid.org result is now the 5th result and moving up fast.
In subsequent conversations, Steven has been quick to point out that this is a free service (and will always remain that way according to him). However, this morning I come to see that not only is he running Google ads on the site, the main landing page is beginning to look very openid.org-centric. By that I mean its starting to look like openid.org is the home of the OpenID project. There is a link off on the right hand side to the (in his words) “More details on OpenID can be found at the (unaffiliated) community site.” That’s pretty confusing and makes it sound like the real OpenID project is actually not affialited with the “official” site on openid.org. That’s stooping pretty low Steven.
Looking further, there are links for an OpenID directory and the latest news. Again, these all are very openid.org-centric and don’t give the real story. As a matter of fact, there are several (much better) directories for OpenID like the one by Thomas Huhn over at openiddirectory.com or the one by the guys at JanRain. In fact, openiddirectory.com is actually linked to from the main page of OpenID.net because as a community we recognize and promote those who are doing good work to help enable OpenID. This looks like another attempt by Steven to glean page views and Google ad revenue by confusing users wanting to learn about the real OpenID.
I fully appreciate that Steven owns this domain. He had originally thought of a distributed identity system but had not actually done the work to make it a reality. He registered the domain and had it on a parked page for quite some time. The problem I have is with his behavior after the discussions we had months ago and the Google juice he had accrued. Had I known he was going to land a provider and turn this into a revenue generator for himself I would have been much more vigilant in reminding people that its openid.net and not .org. Alas, we’re stuck with openid.org as something that Steven is going to own and exploit to his own ends. If it were me, I’d have a heck of a time sleeping at night knowing I was stepping all over others for my own personal gain.
My advice to you as a user and a member of the OpenID community? Boycot openid.org as a provider. Update your links to point at .net instead of .org. Participate in the conversations happening on openid.net, the wiki, the mailing lists. And of course, continue to make OpenID the great community and technology that it is.