2 ms·
Managing passwords isn't like handling nuclear waste. I'd suggest that researching best practices and either implementing them or finding a library to do it fo
by stephenr 10y ago
Managing passwords isn't like handling nuclear waste.
I'd suggest that researching best practices and either implementing them or finding a library to do it for you is a worthwhile exercise, which you will be glad of next time <3rd party> is down, changes their services, etc.
- prats226 10y agoI think big 3rd party services like google can be used reliably? Just that in the beginning, adding own authentication with password management, email verification, password reset would be too slow to implement and maybe less secure than 3rd party? And in the moment of crisis like a hack, it does feel like handling nuclear waste!!
- stephenr 10y agoGoogle is the poster boy for "fuck you we don't support this any more" Also, you're then forcing users to sign up for an account with the provider you choose. Some people choose not to have a Google/etc account.
- prats226 10y agoDoubt it will happen with authenticator since many of their other services would be dependent on it unlike some of the services they have shut down?
- stephenr 10y agoHonestly I wouldn't rely on their own internal services using it being a great reason they'll keep it going. Deviating from Open Standards in favour of their own google-specific services is pretty much step one in their playbook now.