News for hackers. Stuff that matters.
Re:Password-less login by askafriend on Friday March 10, 2017 @04:39AM (#13837443)
> but the user's security is now dependent on the security of their mail provider

Let me put it this way. In many (but not all) cases I would much rather Google be responsible for my security rather than some random startup whose primary objective is to stay alive, not take security seriously.

Re:Password-less login by subkamran on Friday March 10, 2017 @03:31PM (#13841852)
It's funny you say that because I feel the same way as a developer. However, users of my site wanted password-based logins even though I support multiple social logins (Google, FB, Microsoft, etc.). Granted, I use PBKDF2 salting and hashing and I take security seriously, but it's interesting how average people sometimes don't trust social providers or think I'm storing their credentials to that provider.