3 ms·
> But if you don't care who your customers are, why are you asking them to log in? I may not care who they are, but I do care how their identity maps to inform
by Bognar 11y ago
> But if you don't care who your customers are, why are you asking them to log in?
I may not care who they are, but I do care how their identity maps to information in my system. Simple functionality such as favorites or saved preferences doesn't require any information about the user, other than them being able to identify themselves as someone who has previously used the site.
- tboyd47 11y agoCookies or browser fingerprinting should do the trick, with gentle reminders to register. It's how most online shopping carts work. I'm not saying no one should ever use OAuth2, ever. Sometimes websites have to jump through weird hoops to get conversions. But as a web developer, it annoys me a lot.
- Bognar 11y agoCookies and fingerprinting tell me that the same browser is coming back to my website, but I don't care about the browser I care about the user. As a user if I go to a website on my work machine, my home machine, and my phone then I'd like my data to be available on each. I don't have strong opinions on OAuth or any other federated identity solution, I just think it's a specious claim to say that just because a system doesn't care about who a user is then that system doesn't care about the uniqueness of that user.
- copsarebastards 11y agoSo don't collect any more information than you need. Choosing OAuth amounts to a very bad assumption that you'll never care about who your users are.