121–130 of 279 posts
Is the perception that we will be nefariously ingesting your private data? Or that FB auth is just a trend? Or just a mistaken assumption that all users actually have a Facebook account?
And guess what, a facebook account is also an open id.
Earlier quoted context omitted.
I never bothered to sign up at stackoverflow because of OpenID. Not necessarily because I have some philosophical issue with it, but because I already have a system to maintain this stuff and OpenID is just another hoop to jump through. Adding an optional user/password signup is hardly difficult.
Honestly, I'd rather not give Jeff my password. So +1 on OpenID.
In our system, two users are linked together for the purpose of our service. We do that via unique URLs. Do you think it is safe to match up emails for authentication.
i.e. when user 1 wants to get his profile, he has to input his email and his partner's email. If he fails to do that then we do not pull up the profile. Does this make sense and do you think it is secure enough?
Earlier quoted context omitted.
What's impractical about it ? I'm very comfortable with separate identities per-site. If your site isn't worth a separate identity, why am I interacting with it in the first place?
Well, for one thing, this becomes a bigger and bigger problem: http://www.xkcd.com/792/ Yes, it's a ridiculous example, but the vast majority of end users keep the same username and password for all of their online services. Obtain one U/P pair and you could conceivably access their identity anywhere. A centralized, specialized authentication provider could maintain multiple levels of authentication depending on what…
I am starting a new site and want to avoid authentication. In our system, two users are linked together for the purpose of our service. We do that via unique URLs. Do you think it is safe to match up emails for authentication. i.e. when user 1 wants to get his profile, he has to input his email and his partner's email. If he fails to do that then we do not pull up the profile. Does this make sense and do you think it…
No idea what your service is about and if that level of security matters.
I am starting a new site and want to avoid authentication. In our system, two users are linked together for the purpose of our service. We do that via unique URLs. Do you think it is safe to match up emails for authentication. i.e. when user 1 wants to get his profile, he has to input his email and his partner's email. If he fails to do that then we do not pull up the profile. Does this make sense and do you think it…
It might be fine for completely non-sensitive data, but for anything else, probably not.
note: i am not on facebook
I recently integrated JanRain into a client's site and I think I will be using it for future personal projects. It handles all the OAuth/OpenID details while providing Facebook/Twitter/OpenID/LinkedIn/Yahoo/Microsoft Live/Google/Wordpress/and more providers. I would like to give people the Facebook option, but I myself, don't use it unless I have to. Giving a dozen options via JanRain makes that easier.