3 ms·
If it syncs your keys, it has full access. All I'm saying is that authentication is literally the keys to the castle, and inviting third party control of authe
by api 4y ago
If it syncs your keys, it has full access.
All I'm saying is that authentication is literally the keys to the castle, and inviting third party control of authentication has some scary implications in terms of privacy, monopoly control, and security.
We should at least be discussing this, but I don't really see that much discussion. People are just blindly adopting this stuff because it's convenient and not even thinking about what's under the hood or whether there is a way to back out or change provider.
- stavros 4y ago> If it syncs your keys, it has full access. It does, but it doesn't have to. You can use any provider you want, or self-host.