Earlier quoted context omitted.
I don't think password managers have as much penetration as you think and they only work on devices you own. Social login doesn't necessarily give up that much info. Your social network knows who logged in to. The third-party only gets whatever info you accede to which usually is just an email address or name. The huge bonus to users and site owners is that that site isn't storing a password for you. It's easy to scr…
I think you just made a case for DuckDuckGo or (e.g.) LastPass to provided an authentication servive. Mind you, products would have to adopt it. But from a sec + privacy perspective it makes sense to have a 3rd party whose biz model isn't to harvest your personal details.
Ask HN: What percentage of your users are using social login?
71–80 of 172 posts
Re: Ask HN: What percentage of your users are using social login?
#72Re: Ask HN: What percentage of your users are using social login?
#73Curious: has anyone integrated Github login? What percentage of your users use Github?
Re: Ask HN: What percentage of your users are using social login?
#74Earlier quoted context omitted.
Websites using Facebook login usually don't ask for any of your Facebook information, just your email address. They also implicitly have the public information on your profile since they have your Facebook ID, and I suppose it does reveal information to say that this user and email address is associated with this public Facebook profile. But they definitely don't get anything close to the read permissions you have on…
>Websites using Facebook login usually don't ask for any of your Facebook information, just your email address. This is absolutely false. FB delivers a whole profile.
Re: Ask HN: What percentage of your users are using social login?
#75Earlier quoted context omitted.
When you say email, you mean email as username plus a password? Or you mean like TOTP via email?
Good point, I mean user name and password, with an initial verification email. If you use the email option, you can't get into the app without first clicking a verification link in an email. That caused a few headaches after launch when my transactional mail service didn't have a great delivery rate. Still the right thing to do from a security perspective. I do have a big "preview" option on the login page for anyone…
Re: Ask HN: What percentage of your users are using social login?
#761. Its way easier on me. I don't have to worry about password resets or users hacking an account in the site. OAuth and be done.
2. I don't have to deal with any outgoing or incoming emails and complaints dealing with login.
3. I don't have to worry about scammers, since google/facebook pretty much require phone, a non fake email, 2 Factor auth, etc to sign up. So I can put all that overhead onto google and get the added benefit that most of the users signing up are legit.
4. Legit users. I can't say enough how much having legit users helps the overall quality of almost any platform. Allowing people with a fake-email to sign up and create accounts allows for all kinds of headaches that are largely avoided by using exclusively social sign in.
5. Simplicity. One Click login, where the user immediately sees what information I want to collect and can say yes/no. Login/Sign-Up is done in literally one click.
Re: Ask HN: What percentage of your users are using social login?
#77Re: Ask HN: What percentage of your users are using social login?
#78Earlier quoted context omitted.
“If the earliest users you have don't like you enough to give you their social login details ” Perhaps I’m an anomaly, but if there is no regular email sign-up, I’m not using your product, period. There’s enough information floating around about me in databases all over the world, I don’t need them to be further connected and linked. To see the situation with FB/CA and then demand your users use their login is insult…
I built the log-in before the FB/CA situation and am yet to understand how it may change things. However, I personally think people will move on from this like nothing ever happened (which is sad)
Re: Ask HN: What percentage of your users are using social login?
#79100% (Blizzard login). My site is based on a Blizzard game, so it doesn't really make sense to have an account unless it's linked to a blizzard account. But what that means is that if your upstream login provider is down or having issues, your users can't log into your site, so don't do this unless it really makes sense for you. https://cdn.discordapp.com/attachments/282271461853626368/42... OTOH, we don't really hav…