4 ms·
The entire point of "Persona" is that it was actually something in the backend called "BrowserID" that was supposed to integrate with the browser instead of run
by quadrangle 11y ago
The entire point of "Persona" is that it was actually something in the backend called "BrowserID" that was supposed to integrate with the browser instead of running some random JS widget in a page. Well, Mozilla never even finished implementing the first version of that before they declared "no traction"! What nonsense!
- nickbauman 11y agoHaving native code handle something in the browser instead of a thin, easily verifiable javascript widget seems the opposite of a more secure solution.
- nly 11y agoNo, because javascript puts the server in control of the code being run on the client. It renders the whole thing vulnerable to nasty attacks like spoofing and MITM.
- deno 11y agoYou’re missing the point. Emphasis on “in the browser” not “native.” http://www.extremetech.com/wp-content/uploads/2011/07/firefox-account-manager.jpg http://www.extremetech.com/wp-content/uploads/2011/07/firefo...