Fresh Firefox: First Steps?
We all probably have favorite tweaks or setups for Firefox. Here’s a quick list of what I do after a fresh install. Heck, usually I’ll do these things before having browsed to a page yet.
- Visit Preferences, go to “Tabs” section and check the box for “Always show the tab bar”
- Whilst still in Preferences, set the homepage to Netvibes. I’ve tried many options, but this is the one that works the best for me.
- Type in about:config.
- Filter for “search”
- Double-click on browser.search.openintab to toggle it to False. That ensure all my searches from the search shortcut open new tabs.
- Install Verisign Labs seatbelt extension for convenience and ease of access when using my OpenID account. [1]
I may then go on to install other extensions, but that depends on the intended use of the machine. I don’t go nearly as overboard on extensions and themes as I used to, that’s for sure.
Any other good first steps or initial tweaks that you folks make?
–
[1] Earlier look at using Verisign Labs along with their security key for OpenID
Firefox 3 "Native" Extensions
Earlier today I happened upon the Firebug Firefox 3 compatible (beta) extension. I like to mention Firebug (previous mentions) because when doing web development it tends to make me very happy.
I also recently found the Delicious Firefox 3 extension. Another one that I frequently use.
I’d really like to see VeriSign’s Seatbelt extension updated. As it sits right now, by default Firefox 3 won’t even attempt it. Even after clicking through some warnings I end up with:
“VeriSign’s OpenID SeatBelt” will not be installed because it does not provide secure updates.
While I know there are ways around that, it’d sure be nice to see it done “right” instead. Hopefully they’ll address it as we get closer to the Firefox 3 release.
Anyone found any other “mainstream” extensions that have been updated to work with Firefox 3 release candidate without edits or hacks?
OpenID Enabling a WordPress Blog
With the help of a plugin and a few minutes of your time, it is very easy to setup your WordPress blog to be an OpenID consumer. There are tons of OpenID providers helping folks get setup — let’s give those folks places to use ‘em.
I assume you already have an OpenID — if not, go get one! While you don’t need one,with one you’ll be able to follow along in the admin section below.
But first, what is OpenID? OpenID.net describes it as:
OpenID eliminates the need for multiple usernames across different websites, simplifying your online experience.
You get to choose the OpenID Provider that best meets your needs and most importantly that you trust. At the same time, your OpenID can stay with you, no matter which Provider you move to. And best of all, the OpenID technology is not proprietary and is completely free.
Done right, it can save you a heckuva lot of typing of usernames and identifying information — and having to remember them for various sites and applications.
The Plugin Setup
The plugin that I am using is called (cleverly enough) WP-OpenID and is very straight-forward to setup and use. Grab it, upload it and activate it to get rolling (see Managing Plugins in the WordPress Codex if you need help).
Small note: I had issues with it at first. Upgrading my hosting to PHP 5.x straightened everything out though. Something to watch for if you’re still on PHP 4.
After activating, visit Options -> WP-OpenID. There are only two options here.
- Automatic Approval – Want to automatically approve any comment left by someone using OpenID? Check this box. Probably safe until the spammers twig to it… I’m leaving it unchecked as I don’t trust the spammers to remain ignorant.
- Comment Form – Automagically update your blog’s comment form to use the URL field for OpenID. Thus, your commenter need only enter the one field instead of name/email/URL. I have this one enabled. Down the road I may get fancier with how I present the form, but this suffices for the moment.
And with that, you’re ready to accept comments from OpenID authenticated readers.
Admin Enabling
But wait, what about you, the admin of your blog? Well, as admins we now have the ability to use our OpenID to log into our blog. Is this a good thing? I believe so. I’m using VeriSign PIP (personal identity provider) as my OpenID provider and they give me two-factor authentication:
- Something I know – a password
- Something I have – a SecurID token courtesy of PayPal.
To me, this feels much more secure than my existing WP admin password. If your OpenID provider is single-factor, do yourself a favor and concentrate on ensuring you have a strong password!
The WP-OpenID plugin changes the logon screen a bit:

However, we have to associate our WP identity to our OpenID identity before we can use that new login option.
While logged into your blog, visit Users -> Your Identity URLs. Just add your OpenID URL(s) to it by following the prompts.
Next, we probably want to beef up our default WP password since we don’t have type it so often anymore. Visit Users -> Your Profile and give it a good strong password. Perhaps use a heinous one from GRC’s password page?
Now, log out and sign in by just providing your OpenID URL. Cool, huh?
OpenID Delegation
I've had a VeriSign OpenID since August and it works in conjunction with my PayPal security key. Pretty neat stuff, but I keep forgetting the long URL that represents me. Today, I took a few minutes and added some bits of code to my home page. With that code, I can just use my domain as my OpenID and it'll act as a delegate for my "real" VeriSign ID. Cool, huh?
Here's the code:
-
<link href="https://pip.verisignlabs.com/server/" rel="openid.server" />
-
<link href="http://ckas10.pip.verisignlabs.com/" rel="openid.delegate" />
-
<link href="https://pip.verisignlabs.com/server/" rel="openid2.provider" />
-
<link href="http://ckas10.pip.verisignlabs.com/" rel="openid2.local_id" />
-
<meta http-equiv="X-XRDS-Location" content="http://pip.verisignlabs.com/user/ckas10/yadis" />
-
<meta http-equiv="X-YADIS-Location" content="http://pip.verisignlabs.com/user/ckas10/yadis" />
Now I'm not 100% that I need all those, but I came across various permutations in my searching and I figured I'd try to cover all the bases. I also figure that if I'm wrong, a reader smarter than I am will correct me.
Now, when I need to provide my openID I can just use http://solo-technology.com which is much easier for me to remember.
Next, to humor Peter, I'll try to find a WordPress OpenID plugin that works.





