{"id":519,"date":"2008-11-13T14:26:48","date_gmt":"2008-11-13T13:26:48","guid":{"rendered":"http:\/\/www.jurecuhalev.com\/blog\/?p=519"},"modified":"2008-11-13T14:26:48","modified_gmt":"2008-11-13T13:26:48","slug":"twitterank-and-the-perceived-need-for-oauth","status":"publish","type":"post","link":"https:\/\/www.jurecuhalev.com\/blog\/twitterank-and-the-perceived-need-for-oauth\/","title":{"rendered":"Twitterank and the perceived need for OAuth"},"content":{"rendered":"

In the last few days, there have been a number of stories about Twitterank and the way it asks you for your Twitter<\/a> username and password in order to calculate something it calls “PageRank<\/a> for Twitter”.<\/p>\n

\"City<\/a>Image by ecstaticist<\/a> via Flickr<\/span><\/span><\/p>\n

The issue here, as you might have guessed already, is that the service requires you to enter a password and is in this way essentially a phishing site<\/a>.<\/p>\n

As a solution to this problem, everyone in the debate is calling for an use of OAuth<\/a>, authentication protocol that doesn’t require one to disclose authentication tokens.<\/p>\n

So that’s what we already know and the industry essentially decided on – OAuth is good for breaking walled gardens. Yet there’s another point to this story, that I haven’t seen being presented – there is no real need for any authentication in this service<\/span>.<\/p>\n

Twitter has an excellent API, that allows you to see who a (public profile) person follows without any need for authentication. You can either parse microformats on the page or use their API. It’s even bidirectional as you can see both “friends” and “followers” depending on direction of connection you are interested in.<\/p>\n

Oh, an that “viral” tweet, that service allows you to post after you’ve checked your Twitter rank? You can do it with a piece of Javascript.<\/p>\n

The big point<\/span><\/p>\n

So the issue we should be debating about here is how to build more services like Twitter that allow you to access information in computer readable formats using Microformats, RDFa<\/a> or just RESTful<\/a> API and not how to authenticate into\u00a0overly\u00a0closed gardens.<\/p>\n

\u00a0<\/p>\n

\nRelated articles by Zemanta<\/legend>\n

\u00a0<\/p>\n