4 ms·
What signs are you seeing? My point is different. Recovery is the hardest problem in authentication, but when you're as big and as significant as Google is, yo
by underdeserver 5y ago
What signs are you seeing?
My point is different. Recovery is the hardest problem in authentication, but when you're as big and as significant as Google is, you owe it to your users, paying or not, to get it right, however hard it is.
- tptacek 5y agoIf you've got a straightforward solution, implement it and make several billion dollars. I'm not being glib.
- underdeserver 5y agoNah, I'm talking about edge cases Beyond the 99% of cases which I assume they get right, recovery is a cost center. There's a single potential client (maybe two if you add Facebook) who seems to be showing no interest in getting it right. Not the best business proposition.
- tptacek 5y agoCouldn't be wronger. This is a huge problem for everyone.
- underdeserver 4y agoIn the sense of the general account recovery problem, yes. I'm pretty sure it's mathematically provable to be impossible. But the account recovery problem facing Netflix or Github is different from the one facing smaller companies which is different from the one facing Google. I honestly doubt there is a one-size-fits-all solution, I definitely don't have it, but I'd be happy to be surprised.