FxA Signed-in UX

Jared Hirsch 6a68 at mozilla.com
Tue Nov 26 10:51:39 PST 2013


On Nov 26, 2013, at 10:22 AM, Peter deHaan <pdehaan at mozilla.com> wrote:

> Not sure if it violates any privacy/usage policies, but we may already have gravatars from Mozillians.org (assuming the person has an acct already), https://mozillians.org/en-US/u/lloyd/

Gravatar URLs are indeed an md5 of the email address. They can be hotlinked, or we can cache them. Hotlinking provides a nice way to get v0 up and running: no upload flow, no moderator/spam tools, no backend image storage.

Unclear how this would work for the hypothetical FxA user who does not have an email account.

> 
> I'm not sure I understand how it works though, since after viewing the source, it may just be pulling the headshot from gravatar (!?) and then using a common fallback icon if a gravatar image wasn't found: https://mozillians.org/media/img/default_avatar.png
> Now I'm a bit confused though, since I don't know if this means that Gravatar can track you around the internet based on which site requests your profile picture.
> 
> <img src="https://secure.gravatar.com/avatar/5810c72f30b0ab202823d8c26460c39d?s=150x150&r=pg&d=https%3A%2F%2Fmozillians.org%2Fmedia%2Fimg%2Fdefault_avatar.png" alt="lloyd" class="photo">
> 
> And getting that gravatar URL should be pretty trivial, since the UUID looks like it's just a MD5 of the user's email address. For example, Lloyd's publicly listed email address on Mozillians is lloyd at hilaiel.com which you can paste into http://onlinemd5.com/ and get 5810C72F30B0AB202823D8C26460C39D. Convert that to lowercase and it gives you his profile picture: https://secure.gravatar.com/avatar/5810c72f30b0ab202823d8c26460c39d
> The other URL stuff just gives you default sizing, image format, and a default fallback icon.

Even more trivial if we use one of the dozen or so gravatar libraries on npm :-) 

> 
> ----- Original Message -----
> From: "Ryan Feeley" <rfeeley at mozilla.com>
> To: "Christopher Karlof" <ckarlof at mozilla.com>
> Cc: dev-fxacct at mozilla.org, services-qa-staff at mozilla.com, "Lloyd Hilaiel" <lhilaiel at mozilla.com>, "Adam Rogers" <arogers at mozilla.com>
> Sent: Tuesday, November 26, 2013 8:05:32 AM
> Subject: Re: FxA Signed-in UX
> 
>> Looks great. Nice and simple.
> 
> If we had a head, we could show a head like this:
> 
> http://cl.ly/image/333m1s403X2u
> 
> otherwise email.
> 
> Ryan Feeley
> Product Designer, Identity
> Mozilla UX
> IRC: rfeeley
> 
> _______________________________________________
> Dev-fxacct mailing list
> Dev-fxacct at mozilla.org
> https://mail.mozilla.org/listinfo/dev-fxacct
> _______________________________________________
> Dev-fxacct mailing list
> Dev-fxacct at mozilla.org
> https://mail.mozilla.org/listinfo/dev-fxacct




More information about the Dev-fxacct mailing list