Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Why we love Mozilla Persona

blog.zonino.co.uk

Post reply on HN
Print view View original

131–140 of 164 posts

Re: Why we love Mozilla Persona

#131

Post by StavrosK »

callahad wrote: post #90
rebelde wrote: post #58

Earlier quoted context omitted.

Here's an example: I just failed to login to Zonino myself. I enter in the Gmail address that I use for registrations and other junk. I get the message: "Accounts don't match. You are currently signed into Google as [my normal Gmail address]. ... Force Google logout?" Forget that. I'm not interested in logging out of Gmail. Logging out of #1, into #2, out of #2 and back into #1 is more work that simple registration.…

Gah. We still need to switch from OpenID to OAuth for our GMail bridge; OpenID doesn't allow us to tell Google what address we're trying to authenticate. Sorry!

Need any help with that/is there a ticket?

Re: Why we love Mozilla Persona

#132

Post by StavrosK »

drew wrote: post #24

In principle, Persona is great. Not storing passwords is awesome, a non-FB/Google/Twitter identity option is important. I would encourage you, though, to look carefully at your login completion metrics. I implemented Persona on my site ( http://www.sixquestions.co ) to have a pure email option and although users clearly prefer it, about 35% complete the Persona login flow successfully. That's 10 points lower than our…

Your data (especially the fact that users clearly prefer it) tells me that they're clicking it out of curiosity, to see how they can log in with their email.

Unless by "clearly prefer it" you don't mean the initial button click, but the final login?

Re: Why we love Mozilla Persona

#133

Post by the_mitsuhiko »

On of my biggest problems with Persona (and why I stopped using it almost exclusively) is that the popup dialog is badly designed. For instance it has email and password as two consecutive fields which confuses my password manager greatly with different accounts. Secondly does it not work at all for me on mobile devices.

Re: Why we love Mozilla Persona

#134

Post by EGreg »

drew wrote: post #24

In principle, Persona is great. Not storing passwords is awesome, a non-FB/Google/Twitter identity option is important. I would encourage you, though, to look carefully at your login completion metrics. I implemented Persona on my site ( http://www.sixquestions.co ) to have a pure email option and although users clearly prefer it, about 35% complete the Persona login flow successfully. That's 10 points lower than our…

How do you know users clearly prefer it?

Re: Why we love Mozilla Persona

#135

Post by StavrosK »

cantfindmypass wrote: post #75

Last time I looked into persona, it was essentially unusable for my usage - there's no reasonable way to use a different email address to sign up for every site. I like to know who leaked my email address when I start getting spammed. Edit: looks like they may have have fixed it: http://support.mozilla.org/en-US/kb/how-do-i-manage-my-perso... Though I'm not sure if it remains usable with hundreds of email addresses.

That's one of the things I needed too, so I built this (sorry for posting it so much here): https://www.persowna.net/

You can add your domain as a catch-all, so you can authenticate with anything@your-domain.com and it will use a single account to authenticate. Services will still see your custom email address, but you only need one password.

Re: Why we love Mozilla Persona

#136

Post by jt2190 »

jdlshore wrote: post #109

I've been using Persona as my sole login mechanism on http://letscodejavascript.com for over a year. I want to love it, but I don't. The goals behind Persona are excellent: strong privacy protection and relieving website operators of cumbersome and error-prone authentication management. I love the idea. It's why I implemented Persona on my site. The execution of Persona has been a bit wobbly. Logins are critical infr…

  > ...I can't really afford the time required to do my own 
  > authentication...
Just curious: What does your perfect solution look like?

Re: Why we love Mozilla Persona

#137

Post by davodesign84 »

jdlshore wrote: post #109

I've been using Persona as my sole login mechanism on http://letscodejavascript.com for over a year. I want to love it, but I don't. The goals behind Persona are excellent: strong privacy protection and relieving website operators of cumbersome and error-prone authentication management. I love the idea. It's why I implemented Persona on my site. The execution of Persona has been a bit wobbly. Logins are critical infr…

I guess Mozilla limited resources would be used on other projects until it gets the right traction.

I believe it deserves it, but more collaborators should chip in, or more websites should use it in order to make it elegible for more resources.

Re: Why we love Mozilla Persona

#138

Post by drew »

StavrosK wrote: post #132
drew wrote: post #24

In principle, Persona is great. Not storing passwords is awesome, a non-FB/Google/Twitter identity option is important. I would encourage you, though, to look carefully at your login completion metrics. I implemented Persona on my site ( http://www.sixquestions.co ) to have a pure email option and although users clearly prefer it, about 35% complete the Persona login flow successfully. That's 10 points lower than our…

Your data (especially the fact that users clearly prefer it) tells me that they're clicking it out of curiosity, to see how they can log in with their email. Unless by "clearly prefer it" you don't mean the initial button click, but the final login?

You can see how we communicate it on our site if you're curious. Basically it's a modal dialog with four options:

* Facebook * Google * Twitter * Email

We don't use the persona messaging, and I think people's expectation when they click the 'email' button is that it's going to just be a normal email flow. We don't call it Persona or Browser ID or use any of their assets or messaging, because we didn't think anyone would click on it if we did.

But yes, we see a small preference for a button labeled 'email' versus facebook, and a medium preference for either over twitter.

Re: Why we love Mozilla Persona

#139

Post by 500and4 »

drew wrote: post #105
kijin wrote: post #73

Earlier quoted context omitted.

Agreed. Although Persona's technical basis and privacy protections are second to none, the UX is nothing to write home about. It still feels too much like OpenID, and we know what happened to OpenID. Facebook and Twitter can get away with cross-site redirects because they're well known and people trust them. Persona doesn't have that benefit, so it can't get away with the same cumbersome UX. It needs to do better, mu…

The paradox here is that people are more familiar with the appearance of home-grown-style login systems and are more willing to follow through on those than the novel Persona flow, even though the security characteristics of Persona are stronger. It's a chicken and egg problem, and until someone really big takes the plunge and gets everyone comfortable with this style, anyone implementing it is going to be somewhat o…

I think you've hit the nail on the proverbial head here.

Re: Why we love Mozilla Persona

#140

Post by StavrosK »

drew wrote: post #138
StavrosK wrote: post #132

Earlier quoted context omitted.

Your data (especially the fact that users clearly prefer it) tells me that they're clicking it out of curiosity, to see how they can log in with their email. Unless by "clearly prefer it" you don't mean the initial button click, but the final login?

You can see how we communicate it on our site if you're curious. Basically it's a modal dialog with four options: * Facebook * Google * Twitter * Email We don't use the persona messaging, and I think people's expectation when they click the 'email' button is that it's going to just be a normal email flow. We don't call it Persona or Browser ID or use any of their assets or messaging, because we didn't think anyone wo…

I did try it (and signed in) to your site. I'll admit, I knew I was going there for Persona, and "sign in via email" got me curious to click on it, even though I already knew what it was.
Post reply on HN