News for hackers. Stuff that matters.
Re:Shutting down persona.org in November 2016 by metafunctor on Tuesday January 12, 2016 @04:56AM (#10886444)
It really doesn't look all that easy. https://developer.mozilla.org/en-US/Persona/Quick_Setup

Especially compared with usernames and password, which is basically built in to anything already.

Re:Shutting down persona.org in November 2016 by WorldMaker on Tuesday January 12, 2016 @12:01PM (#10888564)
Persona is the easiest one I've worked with, including usernames and passwords, because getting that correctly working with the best practices of 2015, even with built-in support in most frameworks, is and will always be a PITA, and heavily dependent on fragile DB schemas specific to a given framework's whims.

I think that usernames and passwords are "easy" is something of a sunk cost fallacy, both for developers and users, and we tend to forget how much time and effort we "waste" on this year over year. My password manager is up to hundreds of different passwords I use, and I know a lot of users these days whose "password" starts with the now ubiquitous "Forgot Password" button (which is its own headache to setup and get right), as they are okay relying on the relative security of their email address over the fragility of their own memory.

Re:Shutting down persona.org in November 2016 by homerjam on Tuesday January 12, 2016 @05:44AM (#10886602)
Compared to Oauth it's a cakewalk.
Re:Shutting down persona.org in November 2016 by Flimm on Tuesday January 12, 2016 @06:42AM (#10886819)
Even when using a framework that has username/password authentication already, you have to worry about whether your confirmation emails are getting sent properly and are not blocked. So, no, it's not simple.