4 ms·
If there was a strong federated identity provider, there would be one massive target for abuse and attack. If there was a well written protocol and library to
by arbitrage 11y ago
If there was a strong federated identity provider, there would be one massive target for abuse and attack.
If there was a well written protocol and library to help with the independent federation of identities, that could be used by anyone, that would truly help the security of the vast majority of people.
- Pharaoh2 11y agoOh, do you mean like the massive target for abuse and attack that are password managers?
- dvanduzer 11y agoPassword management software centralizes the credentials of a given user. But each instance of the credential database is highly decentralized. So it's only a massive target if you then recentralize those credential databases on a cloud storage service, for example. Attacking the security of a password management system is different than stealing the credential database.
- deleted 11y ago[deleted]
- ossreality 11y agoNO. You're not the first, or fiftieth person to think of this! There was a period of time where someone like you would post their solution to HN like it was some fucking miracle from God. People have been using email for one-time signin access for... over a decade. It's not a good idea. The worst part is you are almost kind of close to describing Persona/BrowserID which, alternatively, is actually a good idea.