41–50 of 122 posts
Someone still needs to solve the "what verifier do I use problem" in a decentralized way, or we're going to see Persona follow OAuth and be dominated by Google, Facebook, and Twitter accounts.
Earlier quoted context omitted.
had. was dropped a while back :'(
Hilariously it was dropped with no real notification, and one day my account just stopped working. I had to make a new one, because there was no way to access my previous account.
Earlier quoted context omitted.
What is the benefit of this (from a developer/website perspective) over using OpenID? I can't really see the difference... obviously I'm missing something fundamental...
The main things are ubiquity, ease of use, and privacy. - Persona works with any email address. This means you can reach anyone that hits your site, without forcing them to sign up with a third party provider. - I can answer the question "what email address do you want to log in with?" I can't answer the question "what is your OpenID?" nor can I remember which of the 13 buttons on Stack Overflow I used last. - OpenID…
Or that was my Google OpenID at one point, not sure if it still acts like one or not.
Earlier quoted context omitted.
had. was dropped a while back :'(
Hilariously it was dropped with no real notification, and one day my account just stopped working. I had to make a new one, because there was no way to access my previous account.
I hope there will soon be a way to `apt-get install mozilla-persona` on a personal server. That would seriously help the deployment a really decentralized Persona.
Do you want Persona authentication on your website or do you want a deamon that is an identity provider for your personal domain?
What language or platform would be ideal?
It doesn't work with google apps, unfortunately. Which is completely logical when I think about it since persona would not use the mx record to find the identity provider.
Actually, why not? Looking for that "aspmx.l.google.com" entry in the MX record would let them know, with a high degree of certainty, that Google is the login authority for that particular email address. Is there something I'm missing?
That said... here is one of the building blocks https://github.com/mozilla/browserid/issues/2932
Get involved and implement this as a NodeJS module.
So...that means instead of someone knowing my password to get into xyz website, they can easily just use persona which in a few clicks will let them into my account?
Someone still needs to solve the "what verifier do I use problem" in a decentralized way, or we're going to see Persona follow OAuth and be dominated by Google, Facebook, and Twitter accounts.
I think Persona does solve that, or at least, is designed to. Could you say more about what you're thinking? (Persona always prompts you with a completely free-form email input field and routes you to the appropriate provider based on that.)