[ANN] NameID - Use namecoin id/ to log into OpenID sites

[domob]

Yes indeed. You have right.
I misunderstood it. I tried before only the ID check function of your site.
With the OpenID support I thought something OpenID like but an own Namecoin Identity service and was expecting a Namecoin symbol what I didn't found.
On
https://stackexchange.com
https://gitorious.org
https://sourceforge.net
is indeed working the OpenID redirection to your Identity providing site.
Unfortunately not all (on openid.org announced) OpenID supported sites are working. But this is surely not your fault.
On myspace I was not even able to click away the add on the startpage and come to the login and on Yahoo you need to find an openid subdomain where you need to register and connect your openid acc with your yahoo account.
Thanks.

Thanks for your confirmation that it indeed does what you had in mind! Regarding not working sites: I'm using a library to do the OpenID stuff and am no expert at this, but I hope that it is really not my fault (by misusing the library). My suspicion is that those sites don't use OpenID version 2 (which the library does) but only version 1. This is just a wild guess, though.

[virtual_master]

I think they are a lot of unused possibilities here.
Could be integrated Namecoin ID to other ID services also ? like OAuth
Would it have sense to create a Namecoin ID scoring system ? based on online social influence, reliability and other parameters

[domob]

I think they are a lot of unused possibilities here.
Could be integrated Namecoin ID to other ID services also ? like OAuth
Would it have sense to create a Namecoin ID scoring system ? based on online social influence, reliability and other parameters

Honestly, I don't know how other systems (OAuth for instance) actually work. I thought that OpenID was the "only" agreed-upon industry standard for authentication providing servers, but I may be wrong here.

I also think that a scoring / trust system would be great - this has already been discussed at different places, I think. (Including the forum spam discussions.) Maybe we could try to work out a good way to do this (if it is possible)?

[phelix]

I think they are a lot of unused possibilities here.
Could be integrated Namecoin ID to other ID services also ? like OAuth
Would it have sense to create a Namecoin ID scoring system ? based on online social influence, reliability and other parameters

Honestly, I don't know how other systems (OAuth for instance) actually work. I thought that OpenID was the "only" agreed-upon industry standard for authentication providing servers, but I may be wrong here.

I also think that a scoring / trust system would be great - this has already been discussed at different places, I think. (Including the forum spam discussions.) Maybe we could try to work out a good way to do this (if it is possible)?

wot would be killer: http://privwiki.dreamhosters.com/wiki/D ... Proposal_2

[khal]

The forum could support openid with this plugin, so we could integrate it at some point :
https://www.phpbb.com/community/viewtop ... &t=1883675

I've tested this plugin on the forum and it doesn't seem to work, not sure why... (hidden forms, not working/validating, nothing visible to login, seems only coded for theme prosilver, etc)

This one is marked as abandoned and not working with php 5.3 and website is not available anymore :
https://www.phpbb.com/community/viewtop ... &t=1666925

Any idea ?

edit: future phpbb version 3.1 will change a lot of things in the authentification, maybe we can wait & see.

[khal]

This one is marked as abandoned and not working with php 5.3 and website is not available anymore :
https://www.phpbb.com/community/viewtop ... &t=1666925

I've tested this plugin too and it does not work.

So, I've searched a bit what this plugin used, and here is the lib :
https://github.com/openid/php-openid

I've downloaded latest version and installed it in a test directory :
https://dot-bit.org/forum/openid2/examples/consumer/

It seems to work with "yahoo.com" for example, but not with "nameid.org" :
https://dot-bit.org/forum/openid2/examp ... nameid.org

I've added the SSL Certificate autority your site is using (wget http://www.startssl.com/certs/class1/sh ... ha1.ca.pem -O /etc/ssl/certs/StartCom_Class_1_Primary_Intermediate_Server.crt), but this is not sufficient.
Your ssl certificate is valid for https://www.nameid.org, but http://www.nameid.org and https://www.nameid.org force the redirection to https://nameid.org.

Could you correct the certificate or redirection problem ? (to do the tests, I can use the http url, if it's easier for you to change the redirection, instead of updating the certificate)

[khal]

You can also use this to do tests :
https://dot-bit.org/forum/openid2/examples/discover.php

This library also provides a "fake" openid server, so, i've been able to test the openid plugin for phpbb (in http).
After some patches, I've successfully created the account "example" and automatically being logged, and I've received the generated password by PM (not needed if you only use openid, only as a backup).

Next step is to use a real OpenID provider, with Namecoin as backend => nameid.org :p

[virtual_master]

Very interesting.
Did you see this one ?
http://sourceforge.net/projects/phpbb-openid/

[khal]

Very interesting.
Did you see this one ?
http://sourceforge.net/projects/phpbb-openid/

Yes, it's the same plugin as the one i've successfully tested (some minor php errors to fix to make it compatible with php 5.3 and it works) :
https://www.phpbb.com/community/viewtop ... &t=1666925

[domob]

It seems to work with "yahoo.com" for example, but not with "nameid.org" :
https://dot-bit.org/forum/openid2/examp ... nameid.org

Hm, that's interesting because my OpenID-stuff is implemented using exactly this PHP library itself. Do you know whether the plugin uses an old version or so? I have seen problems with some sites, and assumed so far that this is because they don't support OpenID v2. Also the tests at http://test-id.org/ (which seems to be done at the moment for me) worked well with nameid.org.

I've added the SSL Certificate autority your site is using (wget http://www.startssl.com/certs/class1/sh ... ha1.ca.pem -O /etc/ssl/certs/StartCom_Class_1_Primary_Intermediate_Server.crt), but this is not sufficient.
Your ssl certificate is valid for https://www.nameid.org, but http://www.nameid.org and https://www.nameid.org force the redirection to https://nameid.org.

Could you correct the certificate or redirection problem ? (to do the tests, I can use the http url, if it's easier for you to change the redirection, instead of updating the certificate)

The certificate includes https://nameid.org/ as a subject alternative name, which should be ok to make it valid for the actual domain used. Or do you know that the TLS engine used here does not support SANs? The problem is that I want to use a certificate which is supported by browsers by default (not CAcert which I have for the other sites I run) and that StartCom, which I use, doesn't give me control over which domain (nameid.org or www.nameid.org) should be the CN and which SAN. So I probably can't fix the certificate to have nameid.org as CN.

The redirects from HTTP -> HTTPS are crucial to enforce a secure connection, so I'm definitely not going to disable that (also not for some time). I've updated the server now to allow https://www.nameid.org/, though, so maybe this helps. Do you see any chance to get more accurate error messages, what exactly goes wrong?