This sounds like a horrible idea.
This is yet another neat mechanism of giving up control. By using Google/Chrome, you inform Google of pretty much what you're doing. Now the same thing is being extended to ssh.
SSH with Facebook Auth
11–18 of 18 posts
Re: SSH with Facebook Auth
#12Facebook: All your servers are belong to us.
Re: SSH with Facebook Auth
#13Earlier quoted context omitted.
Still. The idea that it is a service means that you are still handing over indirect control.
Hey, one of the founders of ScaleFT here. You're absolutely right that when you're using ScaleFT you're trusting both us (as operators of the CA) and your identity provider (in this case Facebook, but we have a bunch of other options more suitable for most businesses). Handing over control isn't necessarily a bad thing. For example, I trust Google to operate a secure and reliable email service much more than I trust…
> I trust Google to operate a secure and reliable email service much more than I trust myself
Hopefully, Google would soon integrate features that let it auto-reply to your incoming messages. It can be trusted more, after all.
Re: SSH with Facebook Auth
#14I'd downvote this if I had the points. It's anti-security to trust your SSH login to anyone.
Re: SSH with Facebook Auth
#15You've got to be kidding me.
Re: SSH with Facebook Auth
#16Earlier quoted context omitted.
Still. The idea that it is a service means that you are still handing over indirect control.
Hey, one of the founders of ScaleFT here. You're absolutely right that when you're using ScaleFT you're trusting both us (as operators of the CA) and your identity provider (in this case Facebook, but we have a bunch of other options more suitable for most businesses). Handing over control isn't necessarily a bad thing. For example, I trust Google to operate a secure and reliable email service much more than I trust…
> I trust Google to operate a secure and reliable email service much more than I trust myself
This sentence has got nothing to do with trust. You believe (maybe rightly so) that Gmail is more secure and reliable than any solution that can be cobbled-up individually.
Simply replacing "believe" with "trust" doesn't really mean the same though. English is a funny language. But then again that's what you probably meant when you said "Trust is a complex thing". Hmmmm... :)
Re: SSH with Facebook Auth
#17If this becomes popular, I will build a new internet.
Re: SSH with Facebook Auth
#18If this becomes popular, I will build a new internet.
Someone is even beating me to it. [1]