5 ms·

Their announcement about no longer supporting logging in via reddit is interesting: https://www.duckdns.org/reddit.jsp https://www.duckdns.org/reddit.jsp Reddi

Their announcement about no longer supporting logging in via reddit is interesting: https://www.duckdns.org/reddit.jsp https://www.duckdns.org/reddit.jsp Reddit's rationale for the C&D was that "Offering this login option misleads and confuses consumers by implying Reddit’s endorsement, association or sponsorship of your application", which is 1. complete bullshit; and 2. hypocritical, given that it's possible to log into reddit with one's Google and/or Apple account

levifig 3y ago
That announcement is… from 2021! :X
- arcanemachiner 3y ago
  Thankfully, reddit inc. has continued to uphold their commitment to being completely out of touch with reality.
scrollaway 3y ago
I was looking at the login links at the top… it's interesting eh. - Persona is dead. - Twitter has been rebranded and its future is uncertain. - Reddit took them down Github and Google are both reliable oauth providers. Though the github oauth is linked to a personal account, not an org, which is all kinds of awful for reliability of the app. Since I use 1Password, I've started to always retain backup login+PW methods for every website I use oauth for anyway. And if I do use oauth, it's ALWAYS gonna be using Google (which is reliable and I pay for) or nothing except for very specific scenarios where oauth perms are relevant. I think the federated auth dream is just entirely dead at this point.
- smaudet 3y ago
  Why is persona dead? I've never used them, their site appears to be online (still), though. > I think the federated auth dream is just entirely dead at this point. That you had to support individual auth providers, none of which were reliable, was a major issue. Had they been "oh here's my auth provider" and you stuck it into a site, that would have been grand. No need to have a bunch of "login with" providers up top. That sort-of worked with OAuth 1.0, IIRC that protocol had issues which is why we had OAuth 2.0 which sorta worked (and I've never seen an easy impl, where you just "stand up" an oauth server and then clients easily use it). Back when you could use the likes of Yahoo to OAuth you around.
creatonez 3y ago
Generally, Reddit is uninterested in being an OAuth provider for anything other than a few bot-related tools. I don't necessarily disagree with their prognosis that being a public OAuth provider sometimes looks like endorsement or association, as it has been used in a lot of phishing attacks. But it's surprising they aren't interested in the prospect of more Reddit accounts.

levifig 3y ago

That announcement is… from 2021! :X

arcanemachiner 3y ago
Thankfully, reddit inc. has continued to uphold their commitment to being completely out of touch with reality.

scrollaway 3y ago

I was looking at the login links at the top… it's interesting eh. - Persona is dead. - Twitter has been rebranded and its future is uncertain. - Reddit took them down Github and Google are both reliable oauth providers. Though the github oauth is linked to a personal account, not an org, which is all kinds of awful for reliability of the app. Since I use 1Password, I've started to always retain backup login+PW methods for every website I use oauth for anyway. And if I do use oauth, it's ALWAYS gonna be using Google (which is reliable and I pay for) or nothing except for very specific scenarios where oauth perms are relevant. I think the federated auth dream is just entirely dead at this point.

smaudet 3y ago
Why is persona dead? I've never used them, their site appears to be online (still), though. > I think the federated auth dream is just entirely dead at this point. That you had to support individual auth providers, none of which were reliable, was a major issue. Had they been "oh here's my auth provider" and you stuck it into a site, that would have been grand. No need to have a bunch of "login with" providers up top. That sort-of worked with OAuth 1.0, IIRC that protocol had issues which is why we had OAuth 2.0 which sorta worked (and I've never seen an easy impl, where you just "stand up" an oauth server and then clients easily use it). Back when you could use the likes of Yahoo to OAuth you around.

creatonez 3y ago

Generally, Reddit is uninterested in being an OAuth provider for anything other than a few bot-related tools. I don't necessarily disagree with their prognosis that being a public OAuth provider sometimes looks like endorsement or association, as it has been used in a lot of phishing attacks. But it's surprising they aren't interested in the prospect of more Reddit accounts.