Hacker News new | ask | show | jobs
by WorldMaker 3816 days ago
Persona is the easiest one I've worked with, including usernames and passwords, because getting that correctly working with the best practices of 2015, even with built-in support in most frameworks, is and will always be a PITA, and heavily dependent on fragile DB schemas specific to a given framework's whims.

I think that usernames and passwords are "easy" is something of a sunk cost fallacy, both for developers and users, and we tend to forget how much time and effort we "waste" on this year over year. My password manager is up to hundreds of different passwords I use, and I know a lot of users these days whose "password" starts with the now ubiquitous "Forgot Password" button (which is its own headache to setup and get right), as they are okay relying on the relative security of their email address over the fragility of their own memory.