3 ms·
At the risk of encouraging Yet Another Warning, would displaying a notice after changing passwords that sites are still authorized be a solution? I'd say that i
by cgranade 17y ago
At the risk of encouraging Yet Another Warning, would displaying a notice after changing passwords that sites are still authorized be a solution? I'd say that it should have links to more info and to the Connections page, but I despair of users giving up at any sign of warnings.
As looking at the issues with that infamous little "lock" icon to indicate HTTPS shows, security and UX intersections are always difficult.
- mooism2 17y agoPossibly display a list of recently authorised sites (and when they were authorised), and make it easy to revoke them without going to another page. It's difficult because people don't expect another step after they've changed their password, and (I'd guess) wouldn't immediately understand the need for it. Perhaps the answer is Yet Another Configuration Setting: the default option revokes all site authorisations when you change your password; the alternate option allows (but forces) you to think about it.