That's the process currently used for changing your password.
But why bother with a password at all? To make it convenient, you could have the browser automate the procedure for logging in via email.
Ask HN: Why not log into web sites via email without any password?
1–10 of 40 posts
Re: Ask HN: Why not log into web sites via email without any password?
#2I'm trying to understand what you're asking.
Are you proposing that browsers get more involved in a user's activities on the internet? That a browser should remember a [email address|username] for various websites... and that alone would be sufficient for the user?
Re: Ask HN: Why not log into web sites via email without any password?
#3I'm trying to understand what you're asking. Are you proposing that browsers get more involved in a user's activities on the internet? That a browser should remember a [email address|username] for various websites... and that alone would be sufficient for the user?
The browser would be more involved in the log in process.
It would know when you attempt to log in somewhere via your email, it would look for a login email from the site (e.g., going to your gmail account), and it would go to the login link specified in the email automatically.
Re: Ask HN: Why not log into web sites via email without any password?
#4I'm trying to understand what you're asking. Are you proposing that browsers get more involved in a user's activities on the internet? That a browser should remember a [email address|username] for various websites... and that alone would be sufficient for the user?
The browser would be more involved in the log in process. It would know when you attempt to log in somewhere via your email, it would look for a login email from the site (e.g., going to your gmail account), and it would go to the login link specified in the email automatically.
I still don't understand, you want to store passwords/logins in email accounts and have the browser fetch them?
Re: Ask HN: Why not log into web sites via email without any password?
#5Earlier quoted context omitted.
The browser would be more involved in the log in process. It would know when you attempt to log in somewhere via your email, it would look for a login email from the site (e.g., going to your gmail account), and it would go to the login link specified in the email automatically.
I still don't understand, you want to store passwords/logins in email accounts and have the browser fetch them?
You only use a single password for your email account (e.g., on gmail). There would be no passwords associated with other sites.
Re: Ask HN: Why not log into web sites via email without any password?
#6Earlier quoted context omitted.
I still don't understand, you want to store passwords/logins in email accounts and have the browser fetch them?
You only use a single password for your email account (e.g., on gmail). There would be no passwords associated with other sites.
Re: Ask HN: Why not log into web sites via email without any password?
#7You could theoretically make an OpenID provider that does that, I think... rather than redirecting users to a website to enter your password, it just shoots an e-mail for you to confirm.
Re: Ask HN: Why not log into web sites via email without any password?
#8You could have a login screen that emails you a logon link containing a passkey or something and you can use that to authenticate? Is that what you mean?
Re: Ask HN: Why not log into web sites via email without any password?
#9You could have a login screen that emails you a logon link containing a passkey or something and you can use that to authenticate? Is that what you mean?
Yes. To make it convenient, you could have the browser automate the process.
Re: Ask HN: Why not log into web sites via email without any password?
#10Because you don't want your sysadmin logging into your favorite dating site as you?
If you are going to do this right, you need email encryption. In which case, you have a client-side certificate. In which case, you might as well just authenticate over SSL with that certificate.
But hey, why do something secure and built-in to every browser (even IE) when you can invent your own protocol instead? It's the Internet!
Also, any reason why this is an "Ask HN" and not a blog post? (Not saying it should be one or the other... just askin'.)