mozilla persona talk at fosdem 2014

- Srikar A

@imasrikar

What is Mozilla Persona ?

• Mozilla Persona - a login system for the Web

• Eliminates site-specific passwords

• Use your email to sign in into websites

• User privacy is one of the core goals

Mozilla Persona is for ..

• Users • A better way to sign in

• Developers • Why Persona? • Libraries & Plugins

• Identity Providers • BrowserID Protocol • Running your own IdP

Mozilla Persona is for ..

• Users • A better way to sign in

Current state of sign-in

Current state of sign-in

Current state of sign-in

Persona-Better way to sign in !

Persona-Better way to sign in !

Persona-Better way to sign in !

Manage addresses

login.persona.org

Supported Browsers

Its native on Firefox OS

Mozilla Persona is for ..

• Developers • Why Persona? • Libraries & Plugins

Why Persona?

• Easy to use. Easy to implement in your apps or sites

• Federated Protocol.

• No social profiles attached

• No need to store passwords

• No need to rely on third-parties

• Eliminate registration forms and more.

• Its open

• No change in code are required by developers.

Persona for developers

UX freedom

Persona for developers

Translated & Localized

Persona at Mozilla

Persona around the web

Persona around the web

Persona around the web

Persona around the web

Libraries & Plugins

JavaScript

Python

Ruby

PHP

Java

Clojure

...

Mozilla Persona is for ..

• Identity Providers • Browser ID Protocol

Browser ID Protocol

• The protocol involves three actors:

• Users: The actual people that want to sign into websites

using Persona.

• Relying Parties (RPs): Websites that want to let users

sign in using Persona.

• Identity Providers (IdPs): Domains that can issue

Persona-compatible identity certificates to their users.

Browser ID Protocol

There are three distinct steps in the protocol:

1. User Certificate Provisioning

2. Assertion Generation

3. Assertion Verification

Browser ID Protocol

1. User Certificate Provisioning

Browser ID Protocol

2. Assertion Generation

In order to prove ownership of a private key, the user's

browser creates and signs a new document.

Browser ID Protocol

3. Assertion Verification

Running your IDP

user@yourdomain.com

yourdomain.com

Identity Provider

References Developer Documentation https://developer.mozilla.org/persona Need to introduce Persona to others? http://mozilla.org/persona User? Developer? Submit your user story: https://github.com/mozilla/browserid-roadmap Need help beyond the docs? #identity on irc.mozilla.org

developer.mozilla.org/persona

Thanks!