3 ms·
I haven't used Apple's system, so I can't comment on it. However, Google's system has a few gaping holes that make it far from effective from a usability standp
by akandiah 14y ago
I haven't used Apple's system, so I can't comment on it. However, Google's system has a few gaping holes that make it far from effective from a usability standpoint.
First: A large number of Google's web applications still rely on application specific passwords. This was understandable a year or so ago, but still? It's getting very tiring generating an application specific password for some Google applications.
This brings me to my next point: the use of application specific passwords has been made complicated than what's required. When confronted with a page that asks me for an application specific password, it takes too long to navigate to the correct page so that I can generate an application specific password.
Thirdly, I can't change the name that I give to an application specific password. Discovered that you have a new installation of Chrome on a VM and want to create a password for that? Too bad: you can't rename the existing password so that you can distinguish the two easily.
Lastly: Have you checked out the mess that's the management page for it? It's extremely confronting. It takes a bit of getting used to. In-fact, until very recently it was rather buggy. For instance: the page used to have a date which showed when an application specific password was last used. This date always had the year 1970. Who lets these kind of bugs through??
- cbsmith 14y ago1) Yes, Google should move more of their apps to supporting this, but looking at only Google services is missing the point. Google Authenticator's TOPA is based on an open standard, so any third party can work with it too (and many do,Dropbox, Lastpass, Drupal, App.net, Dreamhost..."
- cbsmith 14y ago2) I agree the UI could be much better. On the plus side, you only have to navigate it once per application.
- cbsmith 14y ago3) I haven't run in to this problem, but as you can imagine, NOT being able to change it provides a number of benefits from a security standpoint, and if you do want to change it, it is just a matter of creating a new one and deleting the old one. I should think that'd be good enough for anyone.
- cbsmith 14y ago4) I've never seen the 1970 bug. How odd.
- akandiah 14y agoI took this screen-shot a while back: https://lh3.googleusercontent.com/-sugoI5o0K2U/TiEaQ1-qOgI/AAAAAAAADZY/AlRnntmYSPc/w497-h373/google_auth.png https://lh3.googleusercontent.com/-sugoI5o0K2U/TiEaQ1-qOgI/A...