'[OpenID] Test 1 of 2 for second round of detecting false positive'

[prev in list] [next in list] [prev in thread] [next in thread] 

List:       openid-general
Subject:    [OpenID] Test 1 of 2 for second round of detecting false positive
From:       Eric Sachs <esachs () google ! com>
Date:       2011-10-05 18:19:32
Message-ID: CAASurXe_Xz0e9=KknwPABm2xYyRNOQPg6Y34ypcJTt4VLzeFCA () mail ! gmail ! com
[Download RAW message or body]

[Attachment #2 (multipart/related)]

[Attachment #4 (multipart/alternative)]

Two weeks ago we ran a test because of complaints that posts to the OpenID
mailing lists are ending up in user's SPAM folder.  The results
unfortunately confirmed this is a significant and growing problem.  With the
help of the OSU Open Source Lab that hosts these mailing lists, we have made
some changes to better handle the growing adoption of SPF/DKIM in email
servers.

We are now repeating the test from two weeks ago to see how much these
changes have reduced the problem.  We are sending 2 messages to the list.
 Please DO NOT REPLY to this message because in some cases that will cause
mail services to remove the SPAM flag on the initial message.

If you only receive 1 of the 2 messages, please send a message directly to
esachs@google.com.  It would help if you could find the other message in
your SPAM folder and forward its headers.

p.s. The content below is being included because the original post of this
message is an example of one that was marked as SPAM in many cases.

---------- Forwarded message ----------
From: Eric Sachs <esachs@google.com>
Date: Mon, Aug 29, 2011 at 10:47 AM
Subject: Account Chooser working group charter submission
To: openid-general@lists.openid.net

At the last few Internet Identity
Workshops<http://www.internetidentityworkshop.com/>there have been
discussions about building a “cloud based” identity
selector.  The idea has been to mix the user experience advantages of
Information Cards, the popularity of consumer identity providers, and still
support large numbers of identity providers as InCommon has done.  The end
result is a user experience that is being called an “Account
Chooser<http://accountchooser.com/>
.”

A charter for a new account chooser working
group<https://sites.google.com/site/oauthgoog/workinggroupcharter>was
submitted today for review by the specs council.  We plan to discuss
it
in more detail at the upcoming September 12/13 OpenID
Summit<http://openid.net/oidf-summits/>hosted by Microsoft in Mountain
View, CA.

The end goal of this account chooser technique is to make the sign-in
process as simple as a user clicking their picture from a list of accounts
they frequently use on a website.

[image: greenAC.png]

For example, Bonnie is on her mobile phone and wants to login to a website.
 She is shown a list of accounts including her personal account, her work
account, and an entry for her husband who sometimes borrows her phone.  She
simply clicks the account she wants to use.

If she had a new phone, or computer, she would need to add those accounts to
the device, so she would see a screen like the one below where she could
click her identity provider if it was listed.  If not, she can simply type
her email address.  If there is a known identity provider for that email
address, she will be redirected to it, otherwise she will be asked for her
password on this site.

[image: greenadd.png]

In preparation for the upcoming OpenID
Summit<http://openid.net/oidf-summits/>we have started to build the
accountchooser.com website with an overview of this user experience, as well
as an initial implementor’s guide.  A new mailing list will be created by
this working group for further discussion once the spec council gives their
approval.

There are a few websites where you can currently experiment with an account
chooser:

   - Google now provides the option to opt-in to using an account
chooser<https://sites.google.com/site/gitooldocs/experiment---account-chooser>instead
of Google’s traditional email/password based login box
   - There is also a test site <https://account-chooser.appspot.com/> which
   lets you manually reconfigure your account after you login
   - A sample e-commerce site <http://openidsamplestore.com/basic/> is also
   available that uses an account chooser (though it is under construction this
   week, so it may be unstable)

There are multiple ways to deploy an account chooser. The quickest option is
generally to use a SaaS vendor who provides an account chooser as well as
integration with popular identity providers. Current SaaS vendors in this
category include the Google Identity
Toolkit<http://code.google.com/apis/identitytoolkit/>and Janrain
Login Helper <http://www.janrain.com/products/login-helper>.  Another option
is to use a JavaScript widget that implements an account chooser, but then
operate your own server side logic to integrate with identity providers. It
is possible to use the Google Identity
Toolkit<http://code.google.com/apis/identitytoolkit/>in this mode, and
other vendors may provide similar widgets in the future.

-- 
Eric Sachs | Senior Product Manager | esachs@google.com

-- 
Eric Sachs | Senior Product Manager | esachs@google.com

-- 
Eric Sachs | Senior Product Manager | esachs@google.com

[Attachment #7 (text/html)]

<div><div class="gmail_quote"><div><div>Two weeks ago we ran a test because of \
complaints that posts to the OpenID mailing lists are ending up in user&#39;s SPAM \
folder.  The results unfortunately confirmed this is a significant and growing \
problem.  With the help of the OSU Open Source Lab that hosts these mailing lists, we \
have made some changes to better handle the growing adoption of SPF/DKIM in email \
servers.</div> <div><br></div><div>We are now repeating the test from two weeks ago \
to see how much these changes have reduced the problem.  We are sending 2 messages to \
the list.  Please <font class="Apple-style-span" color="#ff0000">DO NOT REPLY</font> \
to this message because in some cases that will cause mail services to remove the \
SPAM flag on the initial message.</div> <div><br></div><div>If you only receive 1 of \
the 2 messages, please send a message directly to <a \
href="mailto:esachs@google.com">esachs@google.com</a>.  It would help if you could \
find the other message in your SPAM folder and forward its headers.</div> \
<div><br></div><div>p.s. The content below is being included because the original \
post of this message is an example of one that was marked as SPAM in many \
cases.</div></div><br><br><div class="gmail_quote">---------- Forwarded message \
                ----------<br>
From: <b class="gmail_sendername">Eric Sachs</b> <span dir="ltr">&lt;<a \
href="mailto:esachs@google.com" \
target="_blank">esachs@google.com</a>&gt;</span><br>Date: Mon, Aug 29, 2011 at 10:47 \
                AM<br>Subject: Account Chooser working group charter submission<br>
To: <a href="mailto:openid-general@lists.openid.net" \
target="_blank">openid-general@lists.openid.net</a><br><br><br><div \
style="font-family: &#39;Times New Roman&#39;; background-color: transparent; "><span \
style="font-family: Arial; background-color: transparent; text-decoration: none; \
vertical-align: baseline; white-space: pre-wrap; ">At the last few </span><a \
href="http://www.internetidentityworkshop.com/" target="_blank"><span \
style="font-family: Arial; color: rgb(0, 0, 153); background-color: transparent; \
vertical-align: baseline; white-space: pre-wrap; ">Internet Identity \
Workshops</span></a><span style="font-family: Arial; background-color: transparent; \
text-decoration: none; vertical-align: baseline; white-space: pre-wrap; "> there have \
been discussions about building a “cloud based” identity selector.  The idea has been \
to mix the user experience advantages of Information Cards, the popularity of \
consumer identity providers, and still support large numbers of identity providers as \
InCommon has done.  The end result is a user experience that is being called an \
“</span><a href="http://accountchooser.com/" target="_blank"><span \
style="font-family: Arial; color: rgb(0, 0, 153); background-color: transparent; \
vertical-align: baseline; white-space: pre-wrap; ">Account Chooser</span></a><span \
style="font-family: Arial; background-color: transparent; text-decoration: none; \
vertical-align: baseline; white-space: pre-wrap; ">.”</span><br> <span \
style="font-family: Arial; text-decoration: none; vertical-align: baseline; \
white-space: pre-wrap; background-color: transparent; "></span><br><span \
style="font-family: Arial; background-color: transparent; text-decoration: none; \
vertical-align: baseline; white-space: pre-wrap; ">A </span><a \
href="https://sites.google.com/site/oauthgoog/workinggroupcharter" \
target="_blank"><span style="font-family: Arial; color: rgb(0, 0, 153); \
background-color: transparent; vertical-align: baseline; white-space: pre-wrap; \
">charter for a new account chooser working group</span></a><span style="font-family: \
Arial; background-color: transparent; text-decoration: none; vertical-align: \
baseline; white-space: pre-wrap; "> was submitted today for review by the specs \
council.  We plan to discuss it in more detail at the </span><a \
href="http://openid.net/oidf-summits/" target="_blank"><span style="font-family: \
Arial; color: rgb(0, 0, 153); background-color: transparent; vertical-align: \
baseline; white-space: pre-wrap; ">upcoming September 12/13 OpenID \
Summit</span></a><span style="font-family: Arial; background-color: transparent; \
text-decoration: none; vertical-align: baseline; white-space: pre-wrap; "> hosted by \
Microsoft in Mountain View, CA.</span></div> <div style="background-color: \
transparent; "><font face="Arial"><span style="white-space: pre-wrap; \
"><br></span></font></div><div style="background-color: transparent; "><span \
style="font-family: Arial; white-space: pre-wrap; ">The end goal of this account \
chooser technique is to make the sign-in process as simple as a user clicking their \
picture from a list of accounts they frequently use on a website.</span></div> <div \
style="background-color: transparent; "><span style="font-family: Arial; white-space: \
pre-wrap; "><br></span></div><div style="background-color: transparent; "><font \
face="Arial"><span style="white-space: pre-wrap; "><img src="cid:ii_132169fed7d564c6" \
alt="greenAC.png" title="greenAC.png"><br>

</span></font></div><div style="background-color: transparent; "><font \
face="Arial"><span style="white-space: pre-wrap; "><br></span></font></div><div \
style="background-color: transparent; "><font face="Arial"><div \
style="background-color: transparent; "> <span style="white-space: pre-wrap; ">For \
example, Bonnie is on her mobile phone and wants to login to a website.  She is shown \
a list of accounts including her personal account, her work account, and an entry for \
her husband who sometimes borrows her phone.  She simply clicks the account she wants \
to use.</span></div> <div style="background-color: transparent; "><span \
style="white-space: pre-wrap; "><br></span></div><div style="background-color: \
transparent; "><span style="white-space: pre-wrap; ">If she had a new phone, or \
computer, she would need to add those accounts to the device, so she would see a \
screen like the one below where she could click her identity provider if it was \
listed.  If not, she can simply type her email address.  If there is a known identity \
provider for that email address, she will be redirected to it, otherwise she will be \
asked for her password on this site.</span></div> <div style="background-color: \
transparent; "><span style="white-space: pre-wrap; "><br></span></div><div \
style="background-color: transparent; "><span style="white-space: pre-wrap; "><img \
src="cid:ii_13216a012a1ca1b5" alt="greenadd.png" title="greenadd.png"><br>

</span></div><div style="background-color: transparent; "><span style="white-space: \
pre-wrap; "><br></span></div></font><br></div><div style="background-color: \
transparent; "><br></div><span style="font-family: &#39;Times New Roman&#39;; "><div \
style="background-color: transparent; "> <span style="font-family: Arial; \
background-color: transparent; text-decoration: none; vertical-align: baseline; \
white-space: pre-wrap; ">In preparation for the upcoming </span><span \
style="font-family: Arial; color: rgb(0, 0, 153); background-color: transparent; \
text-decoration: underline; vertical-align: baseline; white-space: pre-wrap; "><a \
href="http://openid.net/oidf-summits/" target="_blank">OpenID Summit</a></span><span \
style="font-family: Arial; background-color: transparent; text-decoration: none; \
vertical-align: baseline; white-space: pre-wrap; "> we have started to build the \
</span><a href="http://accountchooser.com/" target="_blank"><span style="font-family: \
Arial; color: rgb(0, 0, 153); background-color: transparent; vertical-align: \
baseline; white-space: pre-wrap; ">accountchooser.com</span></a><span \
style="font-family: Arial; background-color: transparent; text-decoration: none; \
vertical-align: baseline; white-space: pre-wrap; "> website with an overview of this \
user experience, as well as an initial implementor’s guide.  A new mailing list will \
be created by this working group for further discussion once the spec council gives \
their approval.</span></div> </span><div style="background-color: transparent; \
"><span style="font-family: Arial; color: rgb(51, 51, 51); background-color: rgb(255, \
255, 255); text-decoration: none; vertical-align: baseline; white-space: pre-wrap; \
"></span><br> <span style="font-family: Arial; background-color: transparent; \
text-decoration: none; vertical-align: baseline; white-space: pre-wrap; ">There are a \
few websites where you can currently experiment with an account chooser:</span><ul \
style="font-family: &#39;Times New Roman&#39;; "> <li style="list-style-type: disc; \
font-family: Arial; background-color: transparent; text-decoration: none; \
vertical-align: baseline; "><span style="background-color: transparent; \
text-decoration: none; vertical-align: baseline; white-space: pre-wrap; ">Google now \
provides the option to </span><a \
href="https://sites.google.com/site/gitooldocs/experiment---account-chooser" \
target="_blank"><span style="color: rgb(0, 0, 153); background-color: transparent; \
vertical-align: baseline; white-space: pre-wrap; ">opt-in to using an account \
chooser</span></a><span style="background-color: transparent; text-decoration: none; \
vertical-align: baseline; white-space: pre-wrap; "> instead of Google’s traditional \
email/password based login box</span></li> <li style="list-style-type: disc; \
font-family: Arial; background-color: transparent; text-decoration: none; \
vertical-align: baseline; "><span style="background-color: transparent; \
text-decoration: none; vertical-align: baseline; white-space: pre-wrap; ">There is \
also </span><a href="https://account-chooser.appspot.com/" target="_blank"><span \
style="color: rgb(0, 0, 153); background-color: transparent; vertical-align: \
baseline; white-space: pre-wrap; ">a test site</span></a><span \
style="background-color: transparent; text-decoration: none; vertical-align: \
baseline; white-space: pre-wrap; "> which lets you manually reconfigure your account \
after you login</span></li> <li style="list-style-type: disc; font-family: Arial; \
background-color: transparent; text-decoration: none; vertical-align: baseline; \
"><span style="background-color: transparent; text-decoration: none; vertical-align: \
baseline; white-space: pre-wrap; ">A </span><a \
href="http://openidsamplestore.com/basic/" target="_blank"><span style="color: rgb(0, \
0, 153); background-color: transparent; vertical-align: baseline; white-space: \
pre-wrap; ">sample e-commerce site</span></a><span style="background-color: \
transparent; text-decoration: none; vertical-align: baseline; white-space: pre-wrap; \
"> is also available that uses an account chooser (though it is under construction \
this week, so it may be unstable)</span></li> </ul><span style="font-family: Arial; \
text-decoration: none; vertical-align: baseline; white-space: pre-wrap; \
background-color: transparent; "></span><span style="font-family: Arial; \
background-color: transparent; text-decoration: none; vertical-align: baseline; \
white-space: pre-wrap; ">There are multiple ways to deploy an account chooser. The \
quickest option is generally to use a SaaS vendor who provides an account chooser as \
well as integration with popular identity providers. Current SaaS vendors in this \
category include the </span><a href="http://code.google.com/apis/identitytoolkit/" \
target="_blank" style="font-family: &#39;Times New Roman&#39;; "><span \
style="font-family: Arial; color: rgb(0, 0, 153); background-color: transparent; \
vertical-align: baseline; white-space: pre-wrap; ">Google Identity \
Toolkit</span></a><span style="font-family: Arial; background-color: transparent; \
text-decoration: none; vertical-align: baseline; white-space: pre-wrap; "> and \
</span><a href="http://www.janrain.com/products/login-helper" target="_blank" \
style="font-family: &#39;Times New Roman&#39;; "><span style="font-family: Arial; \
color: rgb(0, 0, 153); background-color: transparent; vertical-align: baseline; \
white-space: pre-wrap; ">Janrain Login Helper</span></a><span style="font-family: \
Arial; background-color: transparent; text-decoration: none; vertical-align: \
baseline; white-space: pre-wrap; ">.  Another option is to use a JavaScript widget \
that implements an account chooser, but then operate your own server side logic to \
integrate with identity providers. It is possible to use the </span><a \
href="http://code.google.com/apis/identitytoolkit/" target="_blank" \
style="font-family: &#39;Times New Roman&#39;; "><span style="font-family: Arial; \
color: rgb(0, 0, 153); background-color: transparent; vertical-align: baseline; \
white-space: pre-wrap; ">Google Identity Toolkit</span></a><span style="font-family: \
Arial; background-color: transparent; text-decoration: none; vertical-align: \
baseline; white-space: pre-wrap; "> in this mode, and other vendors may provide \
similar widgets in the future.</span></div> <div><br></div><font color="#888888">-- \
<br><div style="line-height: 1.5em; padding-top: 10px; margin-top: 10px; color: \
rgb(85, 85, 85); font-family: sans-serif; "><span style="border-top-width: 2px; \
border-right-width: 0px; border-bottom-width: 0px; border-left-width: 0px; \
border-top-style: solid; border-right-style: solid; border-bottom-style: solid; \
border-left-style: solid; border-top-color: rgb(213, 15, 37); border-right-color: \
rgb(213, 15, 37); border-bottom-color: rgb(213, 15, 37); border-left-color: rgb(213, \
15, 37); padding-top: 2px; margin-top: 2px; ">Eric Sachs |</span><span \
style="border-top-width: 2px; border-right-width: 0px; border-bottom-width: 0px; \
border-left-width: 0px; border-top-style: solid; border-right-style: solid; \
border-bottom-style: solid; border-left-style: solid; border-top-color: rgb(51, 105, \
232); border-right-color: rgb(51, 105, 232); border-bottom-color: rgb(51, 105, 232); \
border-left-color: rgb(51, 105, 232); padding-top: 2px; margin-top: 2px; "> Senior \
Product Manager |</span><span style="border-top-width: 2px; border-right-width: 0px; \
border-bottom-width: 0px; border-left-width: 0px; border-top-style: solid; \
border-right-style: solid; border-bottom-style: solid; border-left-style: solid; \
border-top-color: rgb(0, 153, 57); border-right-color: rgb(0, 153, 57); \
border-bottom-color: rgb(0, 153, 57); border-left-color: rgb(0, 153, 57); \
padding-top: 2px; margin-top: 2px; "> <a href="mailto:esachs@google.com" \
target="_blank">esachs@google.com</a> </span></div> <br></font></div><span \
class="HOEnZb"><font color="#888888"><br><br clear="all"><div><br></div>-- <br><div \
style="line-height: 1.5em; padding-top: 10px; margin-top: 10px; color: rgb(85, 85, \
85); font-family: sans-serif; "> <span style="border-top-width: 2px; \
border-right-width: 0px; border-bottom-width: 0px; border-left-width: 0px; \
border-top-style: solid; border-right-style: solid; border-bottom-style: solid; \
border-left-style: solid; border-top-color: rgb(213, 15, 37); border-right-color: \
rgb(213, 15, 37); border-bottom-color: rgb(213, 15, 37); border-left-color: rgb(213, \
15, 37); padding-top: 2px; margin-top: 2px; ">Eric Sachs |</span><span \
style="border-top-width: 2px; border-right-width: 0px; border-bottom-width: 0px; \
border-left-width: 0px; border-top-style: solid; border-right-style: solid; \
border-bottom-style: solid; border-left-style: solid; border-top-color: rgb(51, 105, \
232); border-right-color: rgb(51, 105, 232); border-bottom-color: rgb(51, 105, 232); \
border-left-color: rgb(51, 105, 232); padding-top: 2px; margin-top: 2px; "> Senior \
Product Manager |</span><span style="border-top-width: 2px; border-right-width: 0px; \
border-bottom-width: 0px; border-left-width: 0px; border-top-style: solid; \
border-right-style: solid; border-bottom-style: solid; border-left-style: solid; \
border-top-color: rgb(0, 153, 57); border-right-color: rgb(0, 153, 57); \
border-bottom-color: rgb(0, 153, 57); border-left-color: rgb(0, 153, 57); \
padding-top: 2px; margin-top: 2px; "> <a href="mailto:esachs@google.com" \
target="_blank">esachs@google.com</a> </span></div> <div><span \
style="border-top-width: 2px; border-right-width: 0px; border-bottom-width: 0px; \
border-left-width: 0px; border-top-style: solid; border-right-style: solid; \
border-bottom-style: solid; border-left-style: solid; border-top-color: rgb(0, 153, \
57); border-right-color: rgb(0, 153, 57); border-bottom-color: rgb(0, 153, 57); \
border-left-color: rgb(0, 153, 57); padding-top: 2px; margin-top: 2px; "><br> \
</span></div></font></span></div><br><br clear="all"><div><br></div>-- <br><div \
style="line-height: 1.5em; padding-top: 10px; margin-top: 10px; color: rgb(85, 85, \
85); font-family: sans-serif; "><span style="border-top-width: 2px; \
border-right-width: 0px; border-bottom-width: 0px; border-left-width: 0px; \
border-top-style: solid; border-right-style: solid; border-bottom-style: solid; \
border-left-style: solid; border-top-color: rgb(213, 15, 37); border-right-color: \
rgb(213, 15, 37); border-bottom-color: rgb(213, 15, 37); border-left-color: rgb(213, \
15, 37); padding-top: 2px; margin-top: 2px; ">Eric Sachs |</span><span \
style="border-top-width: 2px; border-right-width: 0px; border-bottom-width: 0px; \
border-left-width: 0px; border-top-style: solid; border-right-style: solid; \
border-bottom-style: solid; border-left-style: solid; border-top-color: rgb(51, 105, \
232); border-right-color: rgb(51, 105, 232); border-bottom-color: rgb(51, 105, 232); \
border-left-color: rgb(51, 105, 232); padding-top: 2px; margin-top: 2px; "> Senior \
Product Manager |</span><span style="border-top-width: 2px; border-right-width: 0px; \
border-bottom-width: 0px; border-left-width: 0px; border-top-style: solid; \
border-right-style: solid; border-bottom-style: solid; border-left-style: solid; \
border-top-color: rgb(0, 153, 57); border-right-color: rgb(0, 153, 57); \
border-bottom-color: rgb(0, 153, 57); border-left-color: rgb(0, 153, 57); \
padding-top: 2px; margin-top: 2px; "> <a href="mailto:esachs@google.com" \
target="_blank">esachs@google.com</a> </span></div> </div><div><span \
style="border-top-width: 2px; border-right-width: 0px; border-bottom-width: 0px; \
border-left-width: 0px; border-top-style: solid; border-right-style: solid; \
border-bottom-style: solid; border-left-style: solid; border-top-color: rgb(0, 153, \
57); border-right-color: rgb(0, 153, 57); border-bottom-color: rgb(0, 153, 57); \
border-left-color: rgb(0, 153, 57); padding-top: 2px; margin-top: 2px; "><br> \
</span></div>

--005045016f29efb0c704ae913f83--

["greenadd.png" (image/png)]
["greenAC.png" (image/png)]

_______________________________________________
general mailing list
general@lists.openid.net
http://lists.openid.net/mailman/listinfo/openid-general

[prev in list] [next in list] [prev in thread] [next in thread] 