PP Authorizer

An ingredient of Privacy-Protected logins or payments. This add-on checks each page to have "A" tags or "INPUT hidden" tags having "pp-authorizer" class and prompts to move to their links. Using in the middle of OAuth makes it more secure. There is a problem about anonymous authentication. By allowing authentication providers to authenticate other Internet shops or bulletin board sites, it is possible to reduce the privacy information that Internet shops or bulletin board sites must keep. It is an advantage that users can use Internet stores or bulletin boards even with lower reliability. This can realize "anonymous login (privacy protected login)" or "anonymous payment (privacy protected payment)". At this time, processing needs to flow from the bulletin board etc. to the authentication provider, but there is a danger of impersonation in redirecting from a site that must be less reliable to a more reliable site. In order to prevent this impersonation, protocol should not permit automatic redirection from a site of lower reliability to a site of higher reliability, and if the site of lower reliability desires manual redirection, a message that indicates that effect should be displayed on the page, and the remaining necessity is only to have a bookmarklet or add-on that follows the link after checking that the link included in the page is correct. Such an add-on is this PP Authorizer. (However, there will be no page that supports the PP Authorizer for the time being. Then what should we do? You can use the PP Interrupter Lite which realizes similar operation in a point that you have to click on an icon in the address bar before authentication.) The author of this add-on wishes that such functions are installed as standard on browsers, and that all sites stop the automatic redirection as described above. This add-on includes Twitter and Hatena as authentication providers from the beginning, and other authorities ... such as bank associations ... can donate much donations to browser developers so that their authentication provider information will be included from the beginning. The author is dreaming that browser developers acquire abundant development funds thereby. This add-on checks for "A" tags or "INPUT hidden" tags with the "pp-authorizer" class and prompts users to follow the links indicated by those tags. I believe using it during OAuth, for example, makes the process more secure. There is a problem with anonymous authentication. Delegating authentication for online shops and bulletin board sites to other authentication providers can reduce the private information that those shops and sites must retain. An advantage is that users can use online shops and bulletin boards even when they are less trusted. This can realize "anonymous login (privacy-protected login)" or "anonymous payment (privacy-protected payment)". At this point, processing must flow from the bulletin board or other site to the authentication provider, but redirecting from a supposedly less trusted site to a more trusted site carries a risk of impersonation. To prevent such impersonation, automatic redirection from a less trusted site to a more trusted one should not be permitted. When the less trusted site wants a redirect, it should display a message to that effect on the page. All that is then needed is a bookmarklet or add-on that checks that the link on the page is correct before following it. PP Authorizer is such an add-on. (However, there will probably be no pages supporting PP Authorizer for some time. What can be done? One option is to use PP Interrupter Lite, which offers similar operation in that you must click an icon in the address bar before authentication.) The author of this add-on hopes that browsers will include such functions by default and that all sites will stop the automatic redirects described above. Twitter and Hatena are included as authentication providers in this add-on from the start. The author dreams that organizations wishing to add more providers by default, such as banking associations, will donate to make browser development funding plentiful.