News for hackers. Stuff that matters.
Re:OAuth Has Ruined Everything by callahad on Friday October 23, 2015 @12:06AM (#10436743)
Persona didn't have the notion of a global password -- the ideal flow had you authenticating with your email provider, on their domain, which was often completely transparent in cases where you were already signed in to that provider.

Try logging into 123done.org with whatever you want @mockmyid.com to get a sense of what that would ideally look like. My talk from PyCon 2013 goes into a little detail about how the protocol works: https://www.youtube.com/watch?v=nJff23UdNAI

Re:OAuth Has Ruined Everything by illumen on Friday October 23, 2015 @03:59AM (#10437383)
With most email accounts being provided by gmail, outlook, and yahoo, I don't see auth via email domain ever happening.
Re:OAuth Has Ruined Everything by onli on Friday October 23, 2015 @08:43AM (#10438203)
Why? Gmail is already supporting that.
Re:OAuth Has Ruined Everything by TheCoelacanth on Friday October 23, 2015 @12:02PM (#10439451)
The question is how do you effectively communicate that to users without establishing a Persona brand?