2011年11月4日星期五

Cutting back on your long list of passwords

Does anyone actually like passwords? Most people can't stand them because they end up haing to keep track of a long (and often memorized) list of usernames and passwords to sign into the websites moncler bady jacket black they isit. Website owners hate them because it's hard to get people to create a new account on their website, and almost half of those account registrations are neer completed. Thanks to the utilization of new technology, we're now seeing large-scale success in eliminating the need for passwords while increasing the successful registration rate at websites to oer 90%. The most isible examples come from Plaxo, Facebook, Yahoo! and Google using a technique the industry calls hybrid onboarding. In the past, if you're a Gmail user who got an initation to use Plaxo or Facebook, you were asked to perform the traditional process of creating a new account with yet another password, and then you might also hae been asked to proide the password of your email account so Plaxo or Facebook could look up the list of your friends. With hybrid onboarding, if you click on such an initation in your Gmail, you'll see a page like one of these:Clicking the large button on the Plaxo page takes you to a page at Google like this:If you gie consent to share a few pieces of information, you are sent back to Plaxo with all key moncler bady jacket purple registration steps finished.The registration process used to inole more than 10 steps, including requiring you to find one of those "email alidation" messages in your inbox. If you'e followed the steps aboe, you can now sign into Plaxo more easily by simply clicking a button.While Plaxo showed the first successful results of this technique in early 2009, other companies like Facebook are starting to use the same model and to recognize its business alue potential. At the same time, the hybrid onboarding model improes authentication security because websites like Plaxo that use this technique neer see a password from you at all. Since you don't hae to enter your password on additional sites, your password remains closer to you and is less likely to be misused. We'd like to applaud Plaxo and Facebook's work in designing the user experience needed for this technique as well as pushing us to create the optimizations needed to carry out their design. Today we're happy to announce that all of these login flow designs are now aailable to any website operator. All of these hybrid onboarding techniques are based on industry standards that both Google and Yahoo! support, and that other email proiders are beginning to support as well. For more technical details, check out our Google moncler alpes jacket red Code Blog post.Hybrid onboarding is also being used by Enterprise Software-as-a-Serice endors such as ZoHo that want to eliminate the need for employees at their customers' businesses to create another password. More details are aailable on our Enterprise Blog. In addition, after a thorough ealuation of the security and priacy of these technologies, the same techniques are being piloted by President Obama's open identity initiatie to enable citizens to sign in more easily to goernment-operated websites.There is still a long way to go before you'll be able to trim down your long list of website passwords, but this progress demonstrates the potential for een the largest websites to adopt to adopt the hybrid onboarding model. We hope many other websites will follow.Posted by Eric Sachs, Product Manager, Google Security

没有评论:

发表评论