Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Okay, replace my usage of 'Mozilla' with 'ID provider'. The point is we can do all of this without an 'ID provider' today.


E-mailing temporary credentials still effectively relies on an ID provider: your mail server, which must ensure that no-one else can read e-mail sent to your address. You can run both that and a BrowserID provider yourself if you don't trust someone else to do it.

BrowserID is much easier for the web developer to set up and for the user to log in with: no switching between tabs to copy and paste passwords from your e-mail.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: