2 ms·
That's correct. However, the security of any Persona-enabled site is tied to your email account's security through Persona "forgot password". This is my concer
by JakeSc 14y ago
That's correct. However, the security of any Persona-enabled site is tied to your email account's security through Persona "forgot password".
This is my concern; a compromised email account means a compromise of your account on every Persona-enabled site.
- deno 14y ago> … through Persona "forgot password". That’s just how their fallback provider works. BrowserID — the protocol — does not rely on email in any way. There’s no guarantee that if you have valid assertion for joe@dns.tld there’s also an email account by that name.