Live data from Hacker News

Amazon Announces Login with Amazon

phx.corporate-ir.net

71–80 of 93 posts

Re: Amazon Announces Login with Amazon

#71
post #68

I'd prefer Mozilla persona. Amazon as well as Facebook and etc. aren't trustworthy - they are tracking your activity and using them for external logins sounds like a very bad idea.

I get Facebook. But why is Amazon not trustworthy?

How are they different from Facebook? They also have behavioral targeted advertisement.

Re: Amazon Announces Login with Amazon

#74
post #14

I was shocked to discover this is the canonical URL & domain for the Amazon press releases. After I clicked the link and saw the URL I initially thought this was some bizarre phishing scheme. That being said, I think this is a great idea. I don't love the Facebook OAuth flow and the amount of access most apps ask for. I have trouble taking Twitter seriously as an OAuth provider [bias much?]. I think there are many US…

I agree. I love OAuth idea and the single-sign on flow. I love having one source where I can go and see all of the sites that have my info, and I love being able to rescind my account from that central location. However, I hate that Facebook/Twitter take it a step further with all of their social integration features to the point where many apps assume, by default, that you want to share share share everything you do…

> I'd love an OAuth provider that HAS NO SOCIAL NETWORK!

GitHub, BitBucket?

Both are actually good options if you have a service with developer demographic (even if its just in part). I'm using Google & GitHub right now, and will likely add Amazon since it's very little work to do so.

Re: Amazon Announces Login with Amazon

#75
post #24

I'd rather use Mozilla Persona based login systems than OAuth based ones. From both a user and a developer point of view, Persona is a very refreshing approach to identity instead of OAuth. For those wanting to know more about Persona, check out https://login.persona.org/about also since Persona is from Mozilla, you can see all the code and development and you know that privacy and user safety are number one priority…

Exactly. I hope so much that Persona takes off. It's a breeze to implement, taking barely five minutes to add to your site from scratch, versus the hours traditional sign up takes, it's decentralized (you can easily become your own provider, etc https://www.persowna.net) and it's very very convenient.

If you're making something, please please add Persona to the list of login methods. If you're currently using emails for logins, it's even backwards-compatible.

Re: Amazon Announces Login with Amazon

#76
I'd rather use Amazon than Google or Facebook, but I'd rather use a site that only did identity than any of the rest. (I don't want access to my Kindle books screwed up because Amazon decided I did something wrong when using them for login, and banned my account. Yes, that reminds me that I need to backup all my Kindle books monthly.)

I don't know what the business model for such a site would be, though.

Re: Amazon Announces Login with Amazon

#77

This is about the four horsemen -- Amazon, Apple, Facebook, Google -- and how Amazon is moving forward with Facebook and Google, and perhaps into the lead. The true purpose of Google+ is to accumulate more information about you, not to be a "social network" per se. The latter is the means to the former. Amazon has a huge amount of exceptionally high quality ecommerce information. They have "only" 200 million users, b…

Apple doesn't even know how to offer an analytics tool for app developers.

Re: Amazon Announces Login with Amazon

#78
post #64

...This feels more like OpenID rather than OAuth. Could someone explain? I'm so confused.

People apparently think that OAuth is Open Authentication not Open Authorization. I think that ship has sailed, unfortunately. Although it still confuses me when I go to log in to a site and I get the pop-up about "Do you want to authorize this application to access ?"

Re: Amazon Announces Login with Amazon

#79

OAuth is for authorization, not authentication. Please stop using it like this. If you want SSO-style authentication using OpenID or SAML2.

Unfortunately I think that ship has sailed. Personally I'm hoping Persona will catch on. At least that's designed as an authentication scheme.

Re: Amazon Announces Login with Amazon

#80
post #14

Earlier quoted context omitted.

I agree. I love OAuth idea and the single-sign on flow. I love having one source where I can go and see all of the sites that have my info, and I love being able to rescind my account from that central location. However, I hate that Facebook/Twitter take it a step further with all of their social integration features to the point where many apps assume, by default, that you want to share share share everything you do…

I though persona by Mozilla was basically this.

It is. It's unfortunate that more people don't know about it, especially since it's ridiculously easy to implement, well-designed and would save us all a lot of hassle.

If you're running a Django app, please add Persona integration. It takes around five minutes, literally.

Post reply on HN