3 ms·
> I feel like people should at least understand what they are doing when they choose to delegate all their authentication to Google. I think this is my biggest
by RL_Quine 4y ago
> I feel like people should at least understand what they are doing when they choose to delegate all their authentication to Google.
I think this is my biggest concern, it's really scary to have Google Auth as literally the only barrier between no access and complete production access. I understand that a lot of the time Google accounts hold the literal keys to the kingdom anyway (customer data, internal company data, maybe source trees), but SSH was one of the last frontiers remaining.
- a-dub 4y agoit may also be a relic of my old age, but the idea that a browser cookie could be all you need for production root has terrified me in sso environments of past. maybe i have an antiquated view of browser security but it seemed... unnerving.