4 ms·
I specifically avoid using oauth to reduce the impact if google bans me for whatever reason.
by ashtonkem 5y ago
I specifically avoid using oauth to reduce the impact if google bans me for whatever reason.
- rectang 5y agoI do the same with my personal accounts. With work accounts that use GSuite, though, I've been mostly using Google for SSO. Expecting ordinary users to make these kinds of decisions is unrealistic.
- ashtonkem 5y agoYeah, I don’t expect ordinary users to make that decision. But I have no ability to fix this stuff, so I just make decisions for myself in order to minimize unnecessary risks.
- b0afc375b5 5y agoIt's basically a single point of failure (SPOF) and with proper risk assessment, one ultimately concludes to use email/password whenever available.