Using OpenID for Blogger Comments.
Just a quick and dirty overview on how to use OpenID support in Blogger comments.
First the Blogger blog in question must have enabled OpenID support. Currently this is only available by logging into http://draft.blogger.com and going to Settings|Comments. This is now available to everyone via regular Blogger comments settings.
The top two choices (Anyone - Registered Users) both will support OpenID. Save at the bottom of the page. Your blog now allows OpenID authenticated comments. You don't always have to login to draft blogger from that point. Once you've enabled the setting from draft blogger, then it's live on your site.
This is the part that threw me, as I don't really know anything about OpenID, and I presume there are many others as well haven't really looked into it. Without going into details of the OpenID system, many services already give you OpenID accounts whether you know it or not. WordPress.com accounts, AOL/AIM, Livejournal, Typekey etc. So chances are most people already have one. I'll show how to use a WordPress.com OpenID but the others are similar.
First you goto an OpenID enabled Blogger comment form and Select "Wordpress" from the dropdown menu.
In the Blog Name field you put in the full url of your wordpress.com blog (using the http://). Once your comment is entered submit it like normally. But first time you'll be redirected to a WordPress page.
Here you fill out your "nickname" or full name. Seems what will be displayed is the nickname so I'm not totally sure what the full name does. You can leave it blank. Then at the bottom you have several choices. Either to reject sending your credentials (NO), Yes but only do it once, and Yes always. If you select Yes always then from now on you can seamlessly use your wordpress url to login and you won't have to go through the confirmation process, as long as you are logged into wordpress at the time. So once that is done your comment is published (or sent off for moderation if the blog is setup that way).
Once approved the comment appears with your nickname, and the link is to your wordpress.com blog. While this seems rather complicated at first, once authorized and setup is much easier. Other OpenID accounts should go through a very similar process.
Blogger talks about enabling support for using your blogspot (or custom domain) urls available (probably by becoming an OpenID provider as well as a consumer). But if you want it now, you can. There are several free, open, easy places to get an OpenID that you can use anywhere that supports it. MyOpenID is one, but there are others. Takes just a minute to sign up.
So to use that in a Blogger comment, you would select Any OpenID and enter in your OpenID url in the url field. For example I got one that is http://phydeaux3.myopenid.com and I can login and authenticate through MyOpenID in a similar manner as above. Only thing is, the comment links to http://phydeaux3.myopenid.com instead of here. How to change?
Well a quick google found OpenID Delegation which gives the code you can add to your blogspot template so it can function as your OpenID url. This is specific to myopenid, but other OpenID providers would be similar.
Just copy and paste the above in the head of your template. Change the XXXXXXXXX's to whatever your openid name is. Now, if I choose Any OpenID from the dropdown, I can put in http://phydeaux3.blogspot.com as the url. It will then show as the link in the comment.
While there seems to be a heated debate about Blogger removing the URL field from anonymous comments, I think this is a better system. If a little more complicated. Now I'm the only person who can use phydeaux3.blogspot.com in a Blogger comment link, so no one can impersonate me (Not like that's been a problem for me). If Blogger goes through and becomes an OpenID provider as well, and integrates it into your Blog a little easier, then it will be even better. One would hope anyway.
Enabling OpenID support on the blog comments
First the Blogger blog in question must have enabled OpenID support. Currently this is only available by logging into http://draft.blogger.com and going to Settings|Comments. This is now available to everyone via regular Blogger comments settings.
The top two choices (Anyone - Registered Users) both will support OpenID. Save at the bottom of the page. Your blog now allows OpenID authenticated comments. You don't always have to login to draft blogger from that point. Once you've enabled the setting from draft blogger, then it's live on your site.
Using OpenID at Blogger
This is the part that threw me, as I don't really know anything about OpenID, and I presume there are many others as well haven't really looked into it. Without going into details of the OpenID system, many services already give you OpenID accounts whether you know it or not. WordPress.com accounts, AOL/AIM, Livejournal, Typekey etc. So chances are most people already have one. I'll show how to use a WordPress.com OpenID but the others are similar.
First you goto an OpenID enabled Blogger comment form and Select "Wordpress" from the dropdown menu.
In the Blog Name field you put in the full url of your wordpress.com blog (using the http://). Once your comment is entered submit it like normally. But first time you'll be redirected to a WordPress page.
Here you fill out your "nickname" or full name. Seems what will be displayed is the nickname so I'm not totally sure what the full name does. You can leave it blank. Then at the bottom you have several choices. Either to reject sending your credentials (NO), Yes but only do it once, and Yes always. If you select Yes always then from now on you can seamlessly use your wordpress url to login and you won't have to go through the confirmation process, as long as you are logged into wordpress at the time. So once that is done your comment is published (or sent off for moderation if the blog is setup that way).
Once approved the comment appears with your nickname, and the link is to your wordpress.com blog. While this seems rather complicated at first, once authorized and setup is much easier. Other OpenID accounts should go through a very similar process.
Getting an OpenID and using your blogspot url
Blogger talks about enabling support for using your blogspot (or custom domain) urls available (probably by becoming an OpenID provider as well as a consumer). But if you want it now, you can. There are several free, open, easy places to get an OpenID that you can use anywhere that supports it. MyOpenID is one, but there are others. Takes just a minute to sign up.
So to use that in a Blogger comment, you would select Any OpenID and enter in your OpenID url in the url field. For example I got one that is http://phydeaux3.myopenid.com and I can login and authenticate through MyOpenID in a similar manner as above. Only thing is, the comment links to http://phydeaux3.myopenid.com instead of here. How to change?
Well a quick google found OpenID Delegation which gives the code you can add to your blogspot template so it can function as your OpenID url. This is specific to myopenid, but other OpenID providers would be similar.
<link rel="openid.server" href="http://www.myopenid.com/server"/> <!-- For delegating OpenID v1.x-->
<link rel="openid.delegate" href="http://XXXXXXXXX.myopenid.com"/> <!-- For delegating OpenID v1.x-->
<meta http-equiv="X-XRDS-Location" content="http://XXXXXXXX.myopenid.com/xrds"/> <!-- For delegating OpenID v2.x-->
<link rel="openid.delegate" href="http://XXXXXXXXX.myopenid.com"/> <!-- For delegating OpenID v1.x-->
<meta http-equiv="X-XRDS-Location" content="http://XXXXXXXX.myopenid.com/xrds"/> <!-- For delegating OpenID v2.x-->
Just copy and paste the above in the head of your template. Change the XXXXXXXXX's to whatever your openid name is. Now, if I choose Any OpenID from the dropdown, I can put in http://phydeaux3.blogspot.com as the url. It will then show as the link in the comment.
While there seems to be a heated debate about Blogger removing the URL field from anonymous comments, I think this is a better system. If a little more complicated. Now I'm the only person who can use phydeaux3.blogspot.com in a Blogger comment link, so no one can impersonate me (Not like that's been a problem for me). If Blogger goes through and becomes an OpenID provider as well, and integrates it into your Blog a little easier, then it will be even better. One would hope anyway.
Posts
Post a Comment
50 comments:
This is just a test using wordpress.com OpenID.
This is a test using MyOpenID delegated from my blogspot url.
And here's another test, from a WP.com blogger. Wish me luck!
Funnily enough, Native Wordpress installations don't support openID by default. We need to add a plugin for that.
Thanks for this tutorial. I have my OpenID setup and I can leave my blog's address now.
My big concern is that average readers won't know to do this, or won't have the tech-savvy to do it. I agree it's a wonderful added security layer, but the process is not intuitive and a good number of readers may have trouble with it.
just a test
thank for information
me testing too!
testing using wordpress id
haven't launched this yet at my blog..
most of my readers are leaving a link back in the comments section..
testing using wordpress id
haven't launched this yet at my blog..
most of my readers are leaving a link back in the comments section..
test using bloggerid
thanks for the info...
the only open id I'm having trouble with is the one that I have with pibb....
I think this a good thing for blogger. I liked it.
Good tip!
Btw, I think it's good that Blogger doesn't allow URL in anonymous comments. I have seen such impersonation issues in other blogging circles.
Thank you the information, but using OpenID is not working for me.
Using my OpenID in Blogger returns this message:
"Please click Continue... to continue your request. To avoid seeing this message in the future, you should enable JavaScript in your browser." HUH??? (Java is enabled in my Browser)
Click Continue and Blogger returns this error code: bx-yxh888. Another waste of time!
Hopefully, WordPress Bloggers have better luck using OpenID on Blogger!
Happy Holidays
Debbie
I followed your instructions and when trying to comment with my open ID http://rosedesrochers.todays-woman.net/
I get an error.
Hi - great overview.
I'm finding that the delegation that I was using through myopenid.com is now returning an error (ie using my blog url). Also I'm told my myopenid url is invalid. Is it just me? Anyone else having issues?
http://blogpond.com.au
Yep, it seems to be borked somewhere along the way. Not working for delegating myopenid for me now either. It was working before (phydeaux3 points frantically to comments at the top)...see.
Ahem, this is Blogger after all. If it wasn't buggy as hell for a few weeks then it just wouldn't feel like home. :-)
And comment notifications have taken a nosedive as well.
Glad it's not just me. Conspiracy I wonder... Trying again - nope:
"Bad Request Your client has issued a malformed or illegal request".
Errr I guess I should remove it then. phydeaux3 you know where to reach me? Can you contact me if you come up with anything?
Meg not working here!
Yeah, it seems to be a Blogger thing with myopenid.com at least. I tried it again with wordpress.com and it works so...
I'm sure they'll fix it.
Most likely Rose if you are getting the same error messages, you probably have it setup ok and just have to wait on Blogger to fix whatever is wrong on their side.
Same case here too! Guess I did it correctly :)
They must have fixed the problem this afternoon, as it's working now. This comment is through my blogspot url delegated to myopenid.com
Thank you, phydeaux3!
Using MyOpenID and my Blog Link works right when the comment id previewed,
but my Blog link changes to my Bio Page when my comment is published at Blog.
Checking to see if this occurs at your Blog?
Yeah, I've noticed that as well Debbie. Seems to be another bug. :-)
If you preview your comment, then it Unchecks the radio button for Sign In Using, and it's not very noticeable. So if you then go ahead and publish it uses your google account. I made that mistake several times before I noticed.
You just have to remember to recheck the Sign in using circle after previewing. I'm sure they'll sort it.
That's Cool! (when everything is working!)
This comment test should link to my blogspot url.
Thank you for your help!
Happy Holidays,
Debbie
It works! This is also from my blogspot's url delegated to my openID.
Ps: Blog's url can also be delegated to claimID's url(and used to comment with openID), similar to openID
ok deep breath..
going to try openid with my blogspot address :)
I'll be back to check....
Testing one two three.
I use Wordpress on my own domain and have delegated my OpenID to this so that I can use my blog address as my OpenID.
The only problem is that when I comment using this OpenID address my name shows up, as www as you can see.
Sueblimely
@www..err Sueblimely :-)
Well, keep in mind I'm new to this as well. And I have an account both with myopenid.com and claimid.com, but I've been pretty much using myopenid. I see you are delegating through claimid.com. There should be a setting over there that sets that.
After poking around a bit, try logging in here
https://openid.claimid.com
It seems that ClaimID kinda separates their ClaimID settings, and their claimID OpenID settings...gawd. Anyway, at that page is a profile which you can change the display name for you OpenID. Or disallow previously allowed urls so that you should get the profile option next time you try to use it.
I suspect the www is over in that bit somewhere.
I think.
There is a new concern with the security of Blooger OpenID.
Please visit OpenID Phishing Pirates Burn Joan of the Blog for solutions to OpenID Phishing (Identity theft) problems.
Well, the concern isn't that new. The page you linked to talking about some of the solutions was back in Jan/2007. But new for Blogger users I suppose.
But yeah, people should enable the extra measures as I had already done when I signed up. :-)
Really, OpenID phishing issues aren't much different than any other site when you get down to it. Take OpenID out of the equation, a malicious person could create a Blogger blog and link to their own (malicious) version of a blogger comment page (no open id..just Blogger) and phish for real Blogger accounts that way. It's the same type of deal with OpenID. You need to be aware of the possibility, and verify that the page you are on is what it claims to be when logging into any type of account. Preferably by checking the security certificate.
Hi phydeaux3
Unfortunately, I was unaware of OpenID Phishing until after I posted "OpenID, the Oxymoron Google commenting?" If I had known those potential problems existed before it would saved me from writing the follow-up post!
With all the viral activity on the net, I am not surprised that a malicious person can set up any type of blog or web-site to phish for private information. This is the major reason for using my Blog and Web-site persona and never entering personal financial information online... especially my social security number!
For me, it is rough and tough to trust any internet security including security certificates!
In closing, I hope you don't mind linking to you in my Blogging Help section?
I tried both claimid and myopenid too and I'm finding that myopenid is leass complicated :)
this is a test using my blogspot
I just had a quick look andri, and at your blogspot blog you have the delegation code in the wrong spot. Sorry, I didn't explain that bit completely.
It needs to be OUTSIDE of the b:skin tags, but still inside the head tags.
As it is now, it's inside of your CSS section, so it won't delegate.
Also, after fixing that make sure if you preview your comment that you recheck the Sign in Using circle as the comment form still has a bug where it will go unchecked.
thanks for your kind information.me testing too!
@sueblimey
This is a bit late, but apparently your nickname appearing as 'www' was a bug in Blogger's implementation as it is now mentioned as being fixed in this post.
OpenID Commenting Update
I thought I was seeing a lot of people as WWW. :-)
late to the party, just testing if I got the template adjustments right
What is the different between claimID and myOpenID? I"m using claimID and experience slowness when posting a comment. Do you guys experience the same thing?
Also, can openID do follow-up email with the comment? If not, then it is a little bit not that useful.
What Deepak said in the 4th comment :P
The first thing I did was go check your Wordpress blog :P Got sorely disappointed, so came back and thought I'd throw in a word or two.
OpenID support is pretty cool, but since I've moved to Wordpress now, I feel wrestling around with Blogger was like a fight with a pig in mud. You realise that while you've just gotten muddy, the pig had fun!
Now I need to go looking for that plugin :P
Thanks fior the post. I had come to realize that whenever I used my OpenID in a Blogger site that the URL of the openid was displayed instead of my name. I found that if I deleted the blogger.com entry from my OpenID that I was able to reset the nickname field.
I'm also just trying, thank you for information! And if somebody knows where to buy others snake wine bottles from China or Vietnam please tell.
this is a test, grazie mille!
Thanks for the post. I really like the idea of Open ID and hope it keeps becoming easier to use. It still calls me "blog" when I try to use mine with ClaimID. Sigh.
Sonja Foust
Thanks for the tip...test using Blog*Spot custom domain OpenID...
Cool post. I'm sorta testing this out.
I've changed some of my sreg info. Does anyone know how to force Blogger to re-request that info?
I don't know what's going on with wordpress, but every time I leave a comment on blogger under open id/url, it says that there is an error/wrong open id.
Post a Comment
0