Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Consolidated identity and delegated authentication isn’t a conspiracy, it’s a customer driven and infosec driven feature. Managing your own passwords across sites and devices is widely considered to be a security failure with easily guessed reused passwords written in sticky notes or a notebook by the computer or in text files / spreadsheets on that computer.

And governments globally are already doing their own SSO services (the UK has had a version of this for 20 years) and some (Canada) are enabling partnerships with what they feel to be more secure sources of identity eg. online banking.

I think the fundamental problem with Google is that their policies are inscrutable. I wouldn’t rely on any one identity provider for everything I either, and would expect all services have a recourse for resetting your login settings when a particular provider no longer works for you.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: