I dont know whether anyone is planning to do it, or its already implemented.
I want google to provide a developer API to handle registrations/login. I dont want to register by typing in all the details for every site I am interested in. I should be able to login to every site with my google login. Google should provide the site developer with an API to access my personal information.
To get into details, I need something like this.
- I see a new site and I want to join. The site shows that it supports google login
- I type in my google login
- Im redirected to a google page
- I set an access profile which determines how much of my personal information will be given to the new site
- Im redirected back to the site
- Next time onwards login is smooth
- I can use a google page to manage subscriptions to all sites
I want google to do this. If they dont Im gonna do it.



There are security concerns for a log in screen on a third pary site.. i will perfer a service with a simple numebr(which looks random). I will simply give the number to the site. They can get the information from google server. The same principle used for picasaweb private ablumb. If i provide that hash key i will be able to access it. If i feels like my hash key is in hand of some unwanted party i can simply chang it.
Comment by Sachin — September 7, 2007 @ 7:01 pm
Hi,
The concept is a much debated. This is very useful for sites where security is not a high priority. It is already implemented in gmail and orkut.
A single sign in comes handy in an intranet, but when it comes to internet security and authenticity are major factors.
Most single signins use cookies which can be extracted or hacked to obtain personel details. Moreover, hacking a single user can expose all his personal details. This would mean paradise for hackers.
In developing smaller applications an API for single signin will dramatically bring down the programming effort. I say why wait 4 google !!!!!!!!!
Comment by Abin — September 7, 2007 @ 7:11 pm
Read about openID. Very same concept, but does not use google login.
Comment by Derick — September 10, 2007 @ 10:38 am
Well, you need a single login for every site or service. Suppose your password is cracked by someone, then will it affect all of your services? If yes, then will it be a good one?
Comment by Manjesh — September 16, 2007 @ 9:34 pm
Cracking password is near to impossible. Passwords are usually stolen, not cracked.
Comment by admin — October 2, 2007 @ 10:03 pm
Go For OpenID
(and beware of phishing sites pretending to be open-ID enabled)
Comment by Aravind — June 7, 2008 @ 6:11 pm
OpenID is great. I love it.
OAuth is also worth looking at, i hear.
Comment by Vimal George — June 7, 2008 @ 6:27 pm