Hacker News new | ask | show | jobs
by caseysoftware 1612 days ago
I worked for an identity company for years and preached the dangers of social auth.. especially when there is little chance/process for appeal.

If Google kills your account, gmail and youtube are gone. Every social auth account is frozen. No clue what happens to your Android devices but your Play purchases are gone. Your Google Voice number disappears. It's a bad place to be. The story isn't any different for Facebook (Whatsapp, Instagram, Occulus), Apple (icloud, app store), and many many others.

And even then, I'm starting to see the same dangers for any centralized auth provider.

1 comments

Social auth isn't that much better than email auth which is what social auth replaces. If you lose your primary @gmail there goes your accounts to everything. Some services let you change your email but most don't and your email is your account. Having all your accounts exist in a dead-man walking state isn't that much better.
If you own your own mail domain, you can at least move providers. There will be a downtime of days but better than "forever".