Search Content


Featured Content


Content Categories



Twitter to Implement OAuth as Future Authentication Method

Recent events have pulled Twitterís authentication methods even further into the limelight. People are becoming increasingly concerned about the safety of their profile and everything associated with it. Whatís Twitter going to do about it, and when?

Twitter is working on a beta release of OAuth

Engineer/API Lead Alex Payne commented on the Twitter Development Talk group that the User Experience team is putting the finishing touches on a beta release of an OAuth implementation. This comment was made in November and mentioned a release toward the end of December. Since then, Payne has also said they (Twitter) will be experimenting with it after the first of the year.

The next full release of the API will be by OAuth authentication only

That only makes logical sense, right? After all, you have to eliminate all the weakest links to make a stronger chain. Also, using OAuth will decouple API rights from the general access rights used on the web. In turn, youíll see more granularity of access control using OAuth, which is something BasicAuth sucks at.

Unintended Consequences of Better Security

For starters, OAuth is much more difficult for third-party developers to implement than BasicAuth is. Itís a new set of tools and technologies that most people arenít really that familiar with. OAuth also entails bouncing around to the browser while authenticating, much like OpenID does. Once you allow your app once, you should be able to have it remember that and be fine on subsequent authentication attempts. However, itís going to confuse a ton of people the first time. OAuth is not a security silver bullet, but is a step in the right direction. ( Payneís words on OAuth )

Our Plea

Twitter: please donít give up on this. We canít stand to see it go the way of Track or IM. We desperately need to feel safe when using our credentials as recent events have given you a bit of a black eye. OAuth, OpenID, we donít care - just make us feel warm and fuzzy inside.


Related CRM Implementations Articles

DreamHost Web Hosting Servers for File Backup


Most web hosting providers do not allow customers to use server space for storing file backups and there have been instances where personal files were deleted from the server without any...

Read more about DreamHost Web Hosting Servers for File Backup...

NetSuite's OneWorld, Acteva and Salesforce.com


The news as of the first coffee this morning, and the music is Dexter Gordon's 1978 set Live At Carnegie Hall. Great music, but sad to hear his in-between talking to the audience, the man sounds so completely baked. Amazing that it doesn't affect...

Read more about NetSuite's OneWorld, Acteva and Salesforce.com ...