4 ms·
I like the direction you are going. Access to your website stays in my control. I'm not depending on a 3rd party service, OpenID, or anything else, it's my ow
by dpcan 17y ago
I like the direction you are going.
Access to your website stays in my control. I'm not depending on a 3rd party service, OpenID, or anything else, it's my own personal email account, and that email account's ability to receive email is all that's required for it to work.
1) I enter my email address on your site.
2) My browser plugin sees that I've done this.
3) It checks my email for the link from your site, returns to your site, logs me in with that secure link, and I never had to enter a password.
This feels very similar to OpenID, only I don't need to rely on a service that's a part of the OpenID movement, and my password stays with me, my domain, and my email account wherever I choose to host it.
- pyre 17y agoOk, but now your email password is the password to all your accounts. I know that in reality it already is since your email is used to reset the password for most accounts, but consider this: to fully automate the process, you'll have to give your browser (or plugin) your email password to store so that it can log you into the site without entering any password. On a lighter note, even if someone has to enter their email password each time, it won't be such a pain to most people since they already use the same password everywhere. And hopefully this will be slightly more secure than having hundreds copies of the same password scattered about the 'net on servers with varying levels/quality of security.