|
|
|
|
|
|
by sdevoid
3383 days ago
|
|
|
Ten years ago I thought we were all going to solve this with OpenID and strong protections on the provider side. [1] What happened? I know a bunch of providers moved on to OAuth which let users authorized 3rd parties to do stuff on their behalf. And then at some point we decided v1 was hopelessly broken and moved to v2. But today it's still the rare event where I can login with my {Gmail, Hotmail, Yahoo!} account. [1] U2F, authorized devices, predictive phishing protections, etc. |
|
|