3 ms·
I can understand that opinion, but having the user's ability to access your site be in anyone else's hands is a scary thing. Especially when it can create even
by awj 16y ago
I can understand that opinion, but having the user's ability to access your site be in anyone else's hands is a scary thing. Especially when it can create even nastier customer service issues than a lost password.
I'm not really sure what the solution here is, because as a developer I would like to see openid work. Right now it's just hard to argue for.
- Groxx 16y agoI honestly doubt there can be one. A system has to favor one or the other, as giving both equal access opens it to all possible abuse from both sides, rather than just one. As to the customer service issues, if they're having a problem on your site, they're having a problem on every site if they're using OpenID, because their ID has changed everywhere. It's far easier to diagnose the problem there, as it lies wholly (and provably) with their provider, and not with you. More of a headache for you, potentially, people are nuts when they don't get what they want. But at least you have a provable "out" and they have a single place to go for a solution (if there can be one).