E-mail Sign On
peej.co.uk
E-mail Sign On
1–10 of 21 posts
Re: E-mail Sign On
#2Humble bundle did this.
Re: E-mail Sign On
#3Add in an "auth-request" header onto the email, have a plugin for your mail client that looks for the header - and if found hides the mail and does the auth in the background for you - and you then have seamless integration (thanks to http://news.ycombinator.com/user?id=wlll)
Re: E-mail Sign On
#4Its a clever idea but I would think it would be frustratingly slow to login via email. I wouldn't be surprised if it took 20 seconds or more to complete the entire transaction -- that is a long time for a relatively simple operation.
Re: E-mail Sign On
#5... and some call it insecure. If you don't take care of Man-in-the-middle attacks, which is one of the most basic attacks, you simply are not secure on the internet (where things like XSS and cross site forgery are for more common, and can render the most complicated authentication mechanisms useless). But for starting thigns up, it can be just fine.
Re: E-mail Sign On
#6Its a clever idea but I would think it would be frustratingly slow to login via email. I wouldn't be surprised if it took 20 seconds or more to complete the entire transaction -- that is a long time for a relatively simple operation.
As opposed to OpenID, which takes that much time by design. Or more, since chances are you don't know your OpenID and therefore have to look it up in your email.
Re: E-mail Sign On
#71. enter e-mail address
2. go to e-mail
3. refresh
4. refresh
5. count to ten... refresh again
6. maybe it's in my spam folder?.. no...
7. final refresh
8. give up in disgust
minutes pass
9. e-mail finally arrives in inbox; delete it
----
I effectively use this method to log in to Amazon (I have a habit of always changing my Amazon password to something so secure I can't remember it for more than a minute at a time), and it makes me less likely to log in (I want to add this book to my wishlist, but I have to log in first? Maybe I won't bother then).
To be fair Amazon password reset e-mails are usually in my inbox by the time I switch to my e-mail, but some sites are slower.
Re: E-mail Sign On
#8... and some call it insecure. If you don't take care of Man-in-the-middle attacks, which is one of the most basic attacks, you simply are not secure on the internet (where things like XSS and cross site forgery are for more common, and can render the most complicated authentication mechanisms useless). But for starting thigns up, it can be just fine.
I guess you would have to ad a secret to the page you want to login to, that said page could display, and another one it could ask you for.
Hm, might become too inconvenient. The only advantage would be not having to remember the password.
This makes me think the traditional password recovery mechanism should also work that way. You should have to enter your new password first, then get the confirmation link to save it.
Re: E-mail Sign On
#9Add in an "auth-request" header onto the email, have a plugin for your mail client that looks for the header - and if found hides the mail and does the auth in the background for you - and you then have seamless integration (thanks to http://news.ycombinator.com/user?id=wlll )
Enter page, type email, hit enter, wait 5-10 seconds, "You are logged in."
Apparently simple to implement for both customer and provider and takes alway all the headaches from account registering.
I would pay for that.
Re: E-mail Sign On
#101. enter e-mail address 2. go to e-mail 3. refresh 4. refresh 5. count to ten... refresh again 6. maybe it's in my spam folder?.. no... 7. final refresh 8. give up in disgust minutes pass 9. e-mail finally arrives in inbox; delete it ---- I effectively use this method to log in to Amazon (I have a habit of always changing my Amazon password to something so secure I can't remember it for more than a minute at a time),…
It's been some time since I saw an email take more than 5 seconds to arrive.