3 ms·

One of the reasons I dislike Persona and believe it's a step in a wrong direction, is that after so many problems we had with various authentication/identity sy

One of the reasons I dislike Persona and believe it's a step in a wrong direction, is that after so many problems we had with various authentication/identity systems it make you lease your own identity from some third party you're forced to trust. Some say that I can set up my own Persona server, but my problem is that I think one can't really own a domain, only temporarily lease it from a registrar, so it's still the same. In contrast, one can posess a keypair without the necessity of any third parties (and third parties still may confirm the identity).

StavrosK 13y ago
How is that any different from the current system, where your email address is your identity, and Gmail probably owns it?
- atmosx 13y ago
  It's not that what he's saying actually, that all current easy-to-use systems (from Gmail to disqus) are based somehow on third parties. Your solution is the same, so the privacy breach (theoretically) is there. The good is that I don't have to type passwords and you probably should promote this persona feature a little bit more than the privacy thing, which presumes that we trust a third party while most of us do not. Good luck anyway, I might try to setup your persona for my website if persona takes off.
  - StavrosK 13y ago
    Sure, that's what I'm saying too, though. Persona isn't a step backwards, because, at worst, it's equal (and a bit better, privacy-wise) than what we have now. Otherwise, you can set up your own provider and not need to trust anyone else (except the domain provider, I guess, sure).
workhere-io 13y ago
I understand your concerns, but I think the positive aspects of Persona far outweigh the negative ones. E.g., with Persona it's much easier for users to sign up for a new service because no annoying email validation step is required. The developers of a website benefit from not having to store passwords (they only need to store the email of a user).

StavrosK 13y ago

How is that any different from the current system, where your email address is your identity, and Gmail probably owns it?

atmosx 13y ago
It's not that what he's saying actually, that all current easy-to-use systems (from Gmail to disqus) are based somehow on third parties. Your solution is the same, so the privacy breach (theoretically) is there. The good is that I don't have to type passwords and you probably should promote this persona feature a little bit more than the privacy thing, which presumes that we trust a third party while most of us do not. Good luck anyway, I might try to setup your persona for my website if persona takes off.
- StavrosK 13y ago
  Sure, that's what I'm saying too, though. Persona isn't a step backwards, because, at worst, it's equal (and a bit better, privacy-wise) than what we have now. Otherwise, you can set up your own provider and not need to trust anyone else (except the domain provider, I guess, sure).

workhere-io 13y ago

I understand your concerns, but I think the positive aspects of Persona far outweigh the negative ones. E.g., with Persona it's much easier for users to sign up for a new service because no annoying email validation step is required. The developers of a website benefit from not having to store passwords (they only need to store the email of a user).