5 ms·

I remember this idea from a while back, and I still think it's not going to work. It's too cumbersome to have to access your email every time you want to log in

I remember this idea from a while back, and I still think it's not going to work. It's too cumbersome to have to access your email every time you want to log into something. I love the creativity of the solution, but I just don't think it's workable on a large scale.

ricardobeat 12y ago
Now that we all have push email in our smartphones, it's not nearly as cumbersome. I already need to pull out my phone every time I want to access a Google app, having 2FA enabled.
- CaveTech 12y ago
  But clicking the link on your phone would only log you in on your phone, no? So your phone can't aid you here. If you're using any type of setup that doesn't use instant-push emails on your desktop, logging in will be very cumbersome.
  - callahad 12y ago
    The email also contains a short, one-time-use password that you can use instead. Look at the email on your phone, enter the password on your laptop. I've wanted to move Persona in this direction for a while. I'm really excited to see if Webmaker is successful with this auth model.
  - ncallaway 12y ago
    This is essentially the same system that Netflix and other services use to authenticate devices. Simply include an N character (usually 5) random code that expires in minutes (10-20). They can type in this code on whatever device they want to authenticate. Include a link in the email in case they are currently on the device they want to authenticate. This solution is good for long term authentications (registering a device to a service e.g. my Xbox to Netflix), but cumbersome for a service I log into frequently from many unique devices.
esolyt 12y ago
> It's too cumbersome to have to access your email every time you want to log into something That is not the case. It will remember you every time you come back. You just never set a password when registering.

5 ms·

I remember this idea from a while back, and I still think it's not going to work. It's too cumbersome to have to access your email every time you want to log in

by pmichaud 12y ago

ricardobeat 12y ago
Now that we all have push email in our smartphones, it's not nearly as cumbersome. I already need to pull out my phone every time I want to access a Google app, having 2FA enabled.
- CaveTech 12y ago
  But clicking the link on your phone would only log you in on your phone, no? So your phone can't aid you here. If you're using any type of setup that doesn't use instant-push emails on your desktop, logging in will be very cumbersome.
  - callahad 12y ago
    The email also contains a short, one-time-use password that you can use instead. Look at the email on your phone, enter the password on your laptop. I've wanted to move Persona in this direction for a while. I'm really excited to see if Webmaker is successful with this auth model.
  - ncallaway 12y ago
    This is essentially the same system that Netflix and other services use to authenticate devices. Simply include an N character (usually 5) random code that expires in minutes (10-20). They can type in this code on whatever device they want to authenticate. Include a link in the email in case they are currently on the device they want to authenticate. This solution is good for long term authentications (registering a device to a service e.g. my Xbox to Netflix), but cumbersome for a service I log into frequently from many unique devices.
esolyt 12y ago
> It's too cumbersome to have to access your email every time you want to log into something That is not the case. It will remember you every time you come back. You just never set a password when registering.