3 ms·
Speaking of normalizing bad habits, does anyone else remember when you were supposed to only ever enter your password into a site if you'd entered the address y
by tbrownaw 1y ago
Speaking of normalizing bad habits, does anyone else remember when you were supposed to only ever enter your password into a site if you'd entered the address yourself (or used a bookmark), because if some other site had redirected you there it might be a fake?
And then now we've got OIDC.
- whatusername 1y agoThat is less of a problem in the consumer space where the OIDC Auth providers have giant long lived sessions (google/FB/etc). In the government/banking/etc space - there is at least FIDO/WebAuthn/Passkeys which also resolves it. But it's a fair criticism.
- SAI_Peregrinus 1y agoWidespread TLS means you can now trust the domain name.