3 ms·
Is that similar to using something like OpenID, where you sign into the authentication service, then one by one authorize the identity to log you into services?
by rz2k 13y ago
Is that similar to using something like OpenID, where you sign into the authentication service, then one by one authorize the identity to log you into services?
It seems like a more modular approach than using Facebook or Google to sign into third party sites, but similarly secure in terms of exposing passwords.
- claudius 13y agoI don’t think it has much to do with OpenID – my suggestion still keeps the classical username/password tuple as credentials, but simply disallows the user to choose the password freely. One extension, of course, would be for websites to somehow signal to browser ‘Hey, please store this password/username for this website’, but I’m not sure whether that's necessary.