New Persona Beta: Millions of Users Ready to Log In using Any Browser
identity.mozilla.com
New Persona Beta: Millions of Users Ready to Log In using Any Browser
1–10 of 188 posts
Re: New Persona Beta: Millions of Users Ready to Log In using Any Browser
#2I do see the huge potential benefits of the system but have a couple of concerns.
I'm concerned that a 'one password' for everything can be more of a liability if your password is stolen/lost and make phishing potentially more lucrative.
Also concerned about a centralised password store - people make mistakes and if there was some DB leak/hack it could be damaging as it would not be contained within one system (if I've understood how it all works correctly).
Re: New Persona Beta: Millions of Users Ready to Log In using Any Browser
#3I do see the huge potential benefits of the system but have a couple of concerns. I'm concerned that a 'one password' for everything can be more of a liability if your password is stolen/lost and make phishing potentially more lucrative. Also concerned about a centralised password store - people make mistakes and if there was some DB leak/hack it could be damaging as it would not be contained within one system (if I'…
Persona should add two-factor authentication.
For that matter, any open-ID or similar technology should add that.
Re: New Persona Beta: Millions of Users Ready to Log In using Any Browser
#4Does this work yet with Chrome on iOS? The last persona enabled web site I tried, simply threw an error when using the Chrome app.
EDIT: Here is a link to the progress on this issue, it was moved to the next beta https://github.com/mozilla/browserid/issues/2034
Re: New Persona Beta: Millions of Users Ready to Log In using Any Browser
#5I do see the huge potential benefits of the system but have a couple of concerns. I'm concerned that a 'one password' for everything can be more of a liability if your password is stolen/lost and make phishing potentially more lucrative. Also concerned about a centralised password store - people make mistakes and if there was some DB leak/hack it could be damaging as it would not be contained within one system (if I'…
That's just the fallback identity provider Mozilla runs. The idea is that your GMail address will authenticate you using whatever GMail uses, so you can use 2-factor authentication.
If you have your own domain/server, you can easily switch out password authentication for something else today if you run your own Identity Provider. Here's my minimal Python IdP implementing TOTP (Google authenticator) authentication:
Re: New Persona Beta: Millions of Users Ready to Log In using Any Browser
#6I do see the huge potential benefits of the system but have a couple of concerns. I'm concerned that a 'one password' for everything can be more of a liability if your password is stolen/lost and make phishing potentially more lucrative. Also concerned about a centralised password store - people make mistakes and if there was some DB leak/hack it could be damaging as it would not be contained within one system (if I'…
There has to be at least one password. If you use password managers like Lastpass or Keepass, you're essentially putting all your eggs in one basket, but that is generally safer than what the typical internet user does which is use the same password for everything.
Re: New Persona Beta: Millions of Users Ready to Log In using Any Browser
#7I do see the huge potential benefits of the system but have a couple of concerns. I'm concerned that a 'one password' for everything can be more of a liability if your password is stolen/lost and make phishing potentially more lucrative. Also concerned about a centralised password store - people make mistakes and if there was some DB leak/hack it could be damaging as it would not be contained within one system (if I'…
Persona should add two-factor authentication. For that matter, any open-ID or similar technology should add that.
Persona is only handling authentication temporarily.
Once email providers start providing their own Identity Providers then the security falls entirely on them.
For instance, once GMail starts being its own authenticator, my two-factor authentication there will kick in.
Re: New Persona Beta: Millions of Users Ready to Log In using Any Browser
#8I do see the huge potential benefits of the system but have a couple of concerns. I'm concerned that a 'one password' for everything can be more of a liability if your password is stolen/lost and make phishing potentially more lucrative. Also concerned about a centralised password store - people make mistakes and if there was some DB leak/hack it could be damaging as it would not be contained within one system (if I'…
Persona is decentralised by design (with a centralised stop-gap to get things going). Once other companies implement their own Identity Provider it's all entirely decentralised.
Re: New Persona Beta: Millions of Users Ready to Log In using Any Browser
#9Does this work yet with Chrome on iOS? The last persona enabled web site I tried, simply threw an error when using the Chrome app. EDIT: Here is a link to the progress on this issue, it was moved to the next beta https://github.com/mozilla/browserid/issues/2034
Here's the list of supported browsers:
https://developer.mozilla.org/en-US/docs/Persona/Browser_com...
Re: New Persona Beta: Millions of Users Ready to Log In using Any Browser
#10I do see the huge potential benefits of the system but have a couple of concerns. I'm concerned that a 'one password' for everything can be more of a liability if your password is stolen/lost and make phishing potentially more lucrative. Also concerned about a centralised password store - people make mistakes and if there was some DB leak/hack it could be damaging as it would not be contained within one system (if I'…
For most people, their email password already is 'one password' for everything. If someone compromises their email account then they can use the account recovery features of these other websites to reset their password through email.