2 ms·
Yeah, a simple yet effective technique. Had to join a Discord server and they're doing something similar for some other site.
by forgotpwd16 5y ago
Yeah, a simple yet effective technique. Had to join a Discord server and they're doing something similar for some other site.
- Aachen 5y agoIt's also how domain ownership is verified before issuing security certificates. It's used in a lot of places. The title speaks of being a "login with X" which made me expect something else than this manual step, like you could login to HN in a frame and somehow it queried your login status or so. Depending on the CORS headers, that could have been possible but then every site on the Internet can query the same, unless this person talked to HN owners. To me this is just the core interesting part of the story (but then I'm a security person who works with web security on a daily basis). The title isn't intentionally misleading, and it's still a "login with", just not how I was expecting it.