3 ms·
I cannot stress how much I really do not want this to be a thing. I go to extensive links to not use OAuth against Google, Microsoft or anything else - there's
by XorNot 4y ago
I cannot stress how much I really do not want this to be a thing. I go to extensive links to not use OAuth against Google, Microsoft or anything else - there's no way I want a ban in one place to suddenly percolate to every service I may or may have not used that credential.
Same with tying things to my phone: phone number is acceptable, that I port between devices, but my phone, it's contents etc.? Essentially disposable: subject to provider whims, API incompatibilities or apps not implementing backup interfaces (i.e. there's no way to get my home screen back exactly how I had it when I switch Android phones). If it doesn't wind up on one of my computers via Syncthing, I pretty much assume it's going to be deleted forever at some point.
- zie 4y agoFIDO2 and webauthn are agnostic to requiring a FAANG account. It's not required. Yes most developers are lazy and will just use the stuff MS or Google or Apple put out that implements all of this, but it's by no means required at all to use their stuff.