How is it different from OpenID, apart from it's not decentralized?
[deleted]
Introducing BrowserID: A better way to sign in
11–20 of 188 posts
Re: Introducing BrowserID: A better way to sign in
#12How is it different from OpenID, apart from it's not decentralized?
This lets users sign in with an existing email address, so they don't need any new sevice or identifier to remember. It's decentralized; Mozilla has a service for web developers for convenience, but any site can implement the protocol itself instead (or use another provider). And it's designed to let browsers handle the login flow in the future, simplifying login and account creation for end-users.
Re: Introducing BrowserID: A better way to sign in
#13This seems to encourage using the same credentials everywhere which I think most agree is a "bad idea." If BrowserID is compromised, the attackers have access to all the sites where I use browser id, right?
Once this is supported by browsers and email providers there is no "BrowserID" to be compromised, your email provider would have to be compromised (which already gives attackers access to all the sites that you use that email on).
(Unless you meant "BrowserID" the protocol.)
Re: Introducing BrowserID: A better way to sign in
#14This seems to encourage using the same credentials everywhere which I think most agree is a "bad idea." If BrowserID is compromised, the attackers have access to all the sites where I use browser id, right?
Isn't that what happens when someone compromises your email too?
Re: Introducing BrowserID: A better way to sign in
#15Whilst I understand and really like the non-tied in aspect of it, I'd probably implement some sort of facebook/twitter/google account authentication alongside of it. Reason being is that, it too is just another authentication service that I'd rather users not have to make the effort to sign up for.
The intention seems to be that browserid.org is temporary, just there so that this can work until it's supported by browsers and identity providers directly. Once that is achieved, there's nothing extra to sign up for.
Re: Introducing BrowserID: A better way to sign in
#16so, its an easier way for sites to track users?
Re: Introducing BrowserID: A better way to sign in
#17What's the advantage over openid?
Some people think that using URLs instead of email address in OpenID was a big mistake.
Having in-browser support for this kind of thing seems like a plus, too.
Re: Introducing BrowserID: A better way to sign in
#18More at https://browserid.org/
Re: Introducing BrowserID: A better way to sign in
#19so, its an easier way for sites to track users?
Not really. It's a way for a user to prove to a site that they control an email address.
Re: Introducing BrowserID: A better way to sign in
#20When I tried to sign in on the demo site I got a 502 Bad Gateway error. This isn't an encouraging sign.