4 ms·
I was with you until logins. I'm tired of creating accounts and managing umpteen million passwords.
by Pxtl 9y ago
I was with you until logins. I'm tired of creating accounts and managing umpteen million passwords.
- wishinghand 9y agoI only know two passwords: one for my password manager and one to unlock my computer.
- cuonic 9y agoBut you're still "managing umpteen million passwords", hence the name password manager.
- nilved 9y agoThat makes no sense. You use a password manager so you don't need to manage the passwords. If you don't like the concept of having passwords at all then use a stateless, hash-based password generator instead.
- fuzzybeard 9y agoWhat's the alternative? To authenticate against our FB account? I'd much rather have a distributed system than to be forced to maintain a FB account just to login.
- NoGravitas 9y agoHow about indieauth[0]? Indieauth lets you authenticate to websites based on your control of a website you specify (via rel=me links). [0]: https://indieauth.com/ https://indieauth.com/
- jimktrains2 9y agoI haven't fully read your link yet, but wasn't that the point of the original opened spec too?
- NoGravitas 9y agoYes? But indieauth does not require you to personally run an auth server, which makes it easier to adopt. Basically it will search through different online identities that you list on your home page and letting you choose any of their OAuth services.
- Nullabillity 9y agoNeither did OpenID, you would just list your auth server in a special meta tag. IndieAuth even seems to support acting as your OpenID server, see https://indieauth.com/openid https://indieauth.com/openid .
- elihu 9y agoPersona seemed like a pretty good system, until it was shut down. I don't like single-sign-on systems in general, but having it managed by the Mozilla foundation seemed a lot safer than relying on Google/Facebook. I think their original long term plan was to transition users away from their single-sign-on service as browser support for the features they needed got better. The only thing that bothered me about the general design is that it used email addresses as identification tokens, and for the site I was making I didn't even want that much personal information from my users.
- restalis 9y ago"I'm tired of creating accounts and managing umpteen million passwords." That's your choice. You can use the same credentials for all accounts you create and manage the entire mass as one. It's a bad practice, I know, but it's still a solution.