3 ms·
This is brilliant! Has the IETF put out any proposals for a standard of this sort or is this just an idea you had?
by plankers 8y ago
This is brilliant! Has the IETF put out any proposals for a standard of this sort or is this just an idea you had?
- mikepurvis 8y agoUnsure if sarcasm, but OpenID has been a thing for over ten years, and the only place it's ever gained significant traction is with Facebook and Google as the providers: https://en.wikipedia.org/wiki/OpenID#History https://en.wikipedia.org/wiki/OpenID#History Other than StackExchange, I can think of no other major site who looked at the over-engineered protocol, the implementation headaches, the confusing user experience (nascar board of provider logos), and said "yes, that is definitely what we want to have rather than a validated user email address."
- pas 8y agoChrome supports U2F and that is basically a client cert based ID. But yes, the browser should be able to manage identities on a per domain basis.