Password Cards
Here’s an idea that will let your trusty selector log you in to the other 99.999…% of sites that don’t yet support I-Card, OpenID, SAML, Facebook Connect, or Google Friend Connect.
One of the long term goals of the Higgins project is to provide universal login. This is the ability to log you in to almost any website or app (aka Relying Party (RP)) using a variety of methods including I-Card (as defined in ISIP 1.5 and soon here-ish), OpenID and username/password.
As a step towards universal login, I’ve written up this summary of password cards based on input from many folks. The basic idea is to enhance the Higgins browser extension with “password manager” capabilities, and to enhance the selector such that it can store your usernames and passwords as claim values on personal cards, and to do so with special care to prevent phishing attacks.
As I mentioned here, I see this work as a step towards convergence on single browser extension that “just works” (universal login). Beyond un/pw and I-Card we’d like to integrate support for what the IDIB folks, Axel Nennker, and others are doing with OpenID. And then there’s SAML.
Odd as it may seem, by embracing passwords, we’ll help eliminate them. Or at least I hope so.
