3 ms·

So now when your email address gets hacked, ALL your usernames and passwords to every website are also hacked! At least with normal un/pw you need to request a

• 21echoes 15y ago
  by tying all your logins to email, you're left with only one account that you can focus on keeping secure and un-hacked (or a few, as BrowserID allows for multiple emails). The BrowserID is also in talks about support one-off identity generation via the browser, bypassing email on sites which you don't want to identify with. BrowserID supports password reset requests, which can be built into the browser email is the single most user-recognized signifier of identity we have on the internet today. tying identity to anything other than email just seems silly