David Fuelling | 3 Mar 2010 21:38
Picon
Gravatar

Re: [OpenID] UCI Idea: An iPhone OP (?)

On Wed, Mar 3, 2010 at 11:58 AM, Peter Watkins <peterw <at> tux.org> wrote:


 1b) I can't see this working on typical wifi scenarios where the
  device has an IANA reserved address behind some SNAT gateway;
  simply no good way for the Internet-based RP to initiate a
  connection back to the micro OP. With weird ports, an intelligent
  middle-man service could map a public middle-man port to your mobile
  through a mobile-initiated TCP tunnel to the middle-man, but we're
  back to RP's outbound firewall rules.


Good point about trying to run an iPhoneOP on wifi.  I guess I was thinking this would just go over the 3G network in order to avoid firewall and routing problems.  

There's a company with an iPhone App called "ServersMan" (http://serversman.com/promo/promo_ip_en.html -- now available in US and Japanese App Store) that runs a web server on the iPhone.  Using there app, you can hit a URL from a web-browser on your computer, and view files served from a webserver running on the iPhone.  This app can work over the 3G network (worked when I tested it with my phone's wifi turned off).  

 
2) Avoid the dyndns trust issue by using https URLs for your micro OP.
  (Nobody should be using plain http for OP endpoints!)


Great point!

4) iPhone: all this without background apps? How would you use iPhone
  Safari to authenticate to iPhone Micro OP if the two cannot run
  simultaneously? I don't think you can -- Micro OP would need to
  bind to a TCP port to listen for http requests, and Safari would
  need to connect to it. If they can't run concurrently, then you
  simply cannot make that TCP connection, right?


Yes, at least for iPhone this would preclude openid in mobile safari (likely -- I suppose one might be able to program around this).

I was more thinking of the instance where I'm using the web-browser on my laptop to surf, and so I could have the iPhoneOP app running for the duration of the OpenID login.

_______________________________________________
general mailing list
general <at> lists.openid.net
http://lists.openid.net/mailman/listinfo/openid-general

Gmane