3 ms·
Just make an app that automatically connects to your email, gets and parses the email (there can be a specific format) and asks "would you like to sign in to sl
by earenndil 9y ago
Just make an app that automatically connects to your email, gets and parses the email (there can be a specific format) and asks "would you like to sign in to slack?" And you can just press "ok" and you'll get in. To make it even better, you can make it so that the email is signed by a pgp key you've previously trusted ("would you like to sign into trusted provider 'slack'?"), to make it resilient against phishing emails, and for extra protection the slack sign in page can show a random series of 6 digits, which is also emailed to you, so a phishing email wouldn't have access to those 6 digits; and you can compare those to what the app shows you.
- johmue 9y agoi always like solutions that start with "just make an app". Especially if the problem is about convenience.
- sudo-i 9y agoOk, NSA... you're not fooling anyone.
- yoz-y 9y agoJust? Also, the only application that should have an actual access to your mail is your client.
- earenndil 9y agoSure, it could hook into your email client. And it would be opensource. Wouldn't have to be complicated, could even be CLI.
- sopooneo 9y agoI had been prepared to make a comment saying that the article's proposed flow is essentially the same as oAuth, except your email service acts as your identity provider and it is all manual. But I have a feeling you may be facetiously getting at the same thing. Or are you?
- proginthebox 9y agoyou mean like some modification of OAuth?