1. OAuth Phil Wilson, University of Bath, 2008

2. what the? "OAuth provides a way to grant access to your data on some website to a third website, without needing to provide this third website with your authentication information for the original website." - source - source

3. what the? Allows a website access to your password- protected information without needing to give your password to the website

4. password anti-pattern

7. in exchange... every single twitter application (desktop and web tools, twitpic, mobile) asks for your twitter username and password at which point they own your status updates you know all those sites which say "put this number on your page to show that you own it" ?

8. sourcesource (screenshot by Tantek Çelik) Tantek Çelik)

9. "please type your University username and password"

10. enter OAuth

11. most of these are unnecessary

12. Google ContactsAPI

13. OAuth and OpenID OAuth logs a website in to the place where you store your information - it's not about you logging in

14. Is this useful to us? probably! any data that we might want to provide to third-party sites export your blog? wiki space? other personal data? do we ever want to import data?

15. any more time?

16. Adoption? widespread part of a bigger stack providing open-source-like sharing of information between sites and applications Yahoo!, http://developer.yahoo.com/oauth/http://developer.yahoo.com/oauth/ Google, http://code.google.com/apis/accounts/docs/OAuth.html http://code.google.com/apis/accounts/docs/OAuth.html lots and lots of others, no MS yet!

17. What about Facebook Connect? "Facebook Connect... allows any website to connect to facebook to get user's information, and friend list."

18. Facebook Connect Facebook Connect roughly equivalent to OpenID + OpenID Attribute Exchange + Portable Contacts + OpenSocial http://tinyurl.com/6eoys4http://tinyurl.com/6eoys4 for more

19. Thanks! questions