Linked by Eugenia Loli-Queru on Fri 17th Aug 2007 02:22 UTC, submitted by randommsdev
Microsoft has announced the release of Windows Live ID Web Authentication. This means that WLID (formerly known as Passport) is now opened to third party websites to use as their authentication system. Any Windows Live user can potentially log in to a website that implements Web Authentication. Interestingly sample implementations are available in the Ruby, Python, Perl, and PHP open source languages amongst others -- tested on openSUSE 10.2 but expected to work on any platform that supports these languages. More details are available in the SDK documentation.
Thread beginning with comment 264058
To view parent comment, click here.
To read all comments associated with this story, please click here.
To view parent comment, click here.
To read all comments associated with this story, please click here.
Member since:2005-07-07
Member since:2007-06-30
Member since:2006-06-03
Member since:2006-12-06
The password is only stored with Microsoft the website can make calls to pull user information or if it is relative credit card information, color theme, also with this authentication you can add Live services to your website such as if you signed into osnews you would be able to access your email or contacts right in osnews without having to open a seperate Windows Live Hotmail window.
Member since:
2006-02-11
Do those third party sites actually get your password though? I would think they don't, they just use MS's service which validates your login. Your password would still be stored only with Microsoft, at least I would think. Otherwise you're right, it would be a big security risk.