3 ms·
> just submit credentials to /whatever/url/". No, No. We shouldn't send credentials to anywhere. We should be using things like client certs or SRP. We need
by jimktrains2 9y ago
> just submit credentials to /whatever/url/".
No, No. We shouldn't send credentials to anywhere. We should be using things like client certs or SRP. We need to solve the UI and UX problems and actually create better systems, not keep patching over the same broken system.
- StavrosK 9y agoDo you want a marginal improvement that many people might use, or a perfect system that nobody will?
- jimktrains2 9y agoI don't consider something that remember the login URL for a site (which most password managers can store) a marginal improvement at all. Also, "marginal improvement that many people might use, or a perfect system that nobody will?" is a false dichotomy. I'm saying we should make better systems (not perfect ones) easier to use.
- StavrosK 9y ago> I don't consider something that remember the login URL for a site (which most password managers can store) a marginal improvement at all. Me neither, that's why I proposed a system that will allow your password manager to log you in automatically with a single click instead, with a trivial change to the server (a file with some information). > I'm saying we should make better systems (not perfect ones) easier to use. Having seen how little adoption Persona, which was pretty much perfect, got, I don't think the problem is usability.