3 ms·

This is mainly an UI issue. Browser vendors were disincentivised to offer straight authentication API both easy to implement for websites and easy to use for us

by rini17 6y ago

This is mainly an UI issue. Browser vendors were disincentivised to offer straight authentication API both easy to implement for websites and easy to use for users, because it was seen as threatening to users' privacy. Maybe it is harder than I think, like, why can't the browser maintain an identity/profile and allow me to use it to one-click sign in to any website? But I don't see anyone really trying, only saved passwords hacks. Or it is supplied by Facebook and Google instead of your browser.

manigandham 6y ago
Why is it a hack? Saving the password does make it 1 click now.
- rini17 6y ago
  But you are supposed to make a new password for every service when signing in. And fill in your name. Browser may detect there's registration form and autofill but it's ad-hoc, there isn't any standard for that.
  - deleted 6y ago
    [deleted]
  - manigandham 6y ago
    The standard is WebAuthn: https://webauthn.io/ https://webauthn.io/ Otherwise there are HTML5 input field autocompletes which tell the browser what the field is for. Chrome is very good with this and you can fill out an email + new password in seconds.
ralfd 6y ago
Tja. Facebook and Google account login filled that void.
- netsharc 6y ago
  And then Cambridge Analytica came along and abused the moronic security of Login with Facebook (fine, AFAIK technically it was quizes on the FB platform) and 4 years later we have... I don't know, people dying because they injected bleach into their body because their Dear Leader said "we should look into that"...
esprehn 6y ago
That does exist in the form of WebAuthn: https://developer.mozilla.org/en-US/docs/Web/API/Web_Authentication_API https://developer.mozilla.org/en-US/docs/Web/API/Web_Authent... There's also the Web OTP API: https://web.dev/web-otp/ https://web.dev/web-otp/ There's been quite a lot of investment in this space by browsers and also by the standards groups like the FIDO Alliance.
grok22 6y ago
Mozilla attempted to solve this using "Persona", but it never took off and they shut it down. https://developer.mozilla.org/en-US/docs/Archive/Mozilla/Persona https://developer.mozilla.org/en-US/docs/Archive/Mozilla/Per...

by rini17 6y ago

manigandham 6y ago

Why is it a hack? Saving the password does make it 1 click now.

rini17 6y ago
But you are supposed to make a new password for every service when signing in. And fill in your name. Browser may detect there's registration form and autofill but it's ad-hoc, there isn't any standard for that.
- deleted 6y ago
  [deleted]
- manigandham 6y ago
  The standard is WebAuthn: https://webauthn.io/ https://webauthn.io/ Otherwise there are HTML5 input field autocompletes which tell the browser what the field is for. Chrome is very good with this and you can fill out an email + new password in seconds.

ralfd 6y ago

Tja. Facebook and Google account login filled that void.

netsharc 6y ago
And then Cambridge Analytica came along and abused the moronic security of Login with Facebook (fine, AFAIK technically it was quizes on the FB platform) and 4 years later we have... I don't know, people dying because they injected bleach into their body because their Dear Leader said "we should look into that"...

esprehn 6y ago

That does exist in the form of WebAuthn: https://developer.mozilla.org/en-US/docs/Web/API/Web_Authentication_API https://developer.mozilla.org/en-US/docs/Web/API/Web_Authent... There's also the Web OTP API: https://web.dev/web-otp/ https://web.dev/web-otp/ There's been quite a lot of investment in this space by browsers and also by the standards groups like the FIDO Alliance.

grok22 6y ago

Mozilla attempted to solve this using "Persona", but it never took off and they shut it down. https://developer.mozilla.org/en-US/docs/Archive/Mozilla/Persona https://developer.mozilla.org/en-US/docs/Archive/Mozilla/Per...