3 ms·

I think they're spot-on with the idea that it needs to be integrated into sites rather than appearing as a separately branded popup. I tried it out on a site I

I think they're spot-on with the idea that it needs to be integrated into sites rather than appearing as a separately branded popup. I tried it out on a site I was building a couple months ago. Every time I had a non-"techie" user try it out, they got confused. What's this popup? What's Persona? What am I signing up for exactly? It was just bad UX. That said, I think there's a very real need for what they're offering. I don't want to store passwords myself, even if they're hashed. I also don't want to re-implement forgotten usernames, passwords, reset emails, etc. It's a bother, I'd rather focus on my app rather than a solved problem like this, and to be honest I don't quite trust myself enough to get it 100% right. So, I think it would be the best of both worlds to offer auth as an API rather than providing their own experience. As in, I could just call Persona.login("username", "password", ...) and get back an assertion. I really hope they go in this direction.

sirn 13y ago
UX is one major problem with Persona. I built a small site that used Persona a while back (without offering any other login choices) and most user can't figure out how to sign up. Facebook login as a separate brand works because user already knows and uses Facebook. This is completely opposite in Persona case. User don't already have Persona "account" and they don't understands why should they sign up for it. IMO, Persona should aim to replace classic login instead of social login, e.g. by making Persona nearly invisible to the user.
- yggdrasil 13y ago
  Heartily second the idea of Persona being re-rolled as classic login replacement, with emphasis on standardizing login best practices, such as password strength, password format disclosure, input naming that plays nicely with other password management systems, etc. The sheer amount of cruft and non-standardization involved with basic site login actively discourages user involvement. If Persona solved that unobtrusively, they would be adopted and evangelized all over the land.
  - mgreg 13y ago
    And I'll 'third' the suggestion. Would love to see a SSO option that didn't bleed private info and wasn't linked to someone trying to make money from my data.
- vdhus 13y ago
  Spot on.

sirn 13y ago

UX is one major problem with Persona. I built a small site that used Persona a while back (without offering any other login choices) and most user can't figure out how to sign up. Facebook login as a separate brand works because user already knows and uses Facebook. This is completely opposite in Persona case. User don't already have Persona "account" and they don't understands why should they sign up for it. IMO, Persona should aim to replace classic login instead of social login, e.g. by making Persona nearly invisible to the user.

yggdrasil 13y ago
Heartily second the idea of Persona being re-rolled as classic login replacement, with emphasis on standardizing login best practices, such as password strength, password format disclosure, input naming that plays nicely with other password management systems, etc. The sheer amount of cruft and non-standardization involved with basic site login actively discourages user involvement. If Persona solved that unobtrusively, they would be adopted and evangelized all over the land.
- mgreg 13y ago
  And I'll 'third' the suggestion. Would love to see a SSO option that didn't bleed private info and wasn't linked to someone trying to make money from my data.
vdhus 13y ago
Spot on.