> I can see that for a service that you would use several times a day (Twitter etc.) then it would be a major PITA.
Well, even then, it depends on how long sessions last in combination with your browser cookie policy. How often do you authenticate your HN account?
Re:Let’s talk about usernames
by cyberferret on Monday February 12, 2018 @04:16AM
(#16357494)
True. Long running sessions would help. There are those that would argue it is a security risk though.
Even EnvKey that I mentioned above has a session cookie of some sort - I can usually use the app for several days after logging in, even if I close the app - but after that I am prompted to instigate the email with my unique login key.
It would be nice if we eventually got to a point where control of whether a password was even allowed, how long your session cookies lasted, and the ability to list and invalidate all existing sessions was as common and expected as a password reset system.
Nowhere near as inconvenient as it sounds - It is the sort of service that you would rarely log in to. Mainly when setting up a new server or adding a third party service to your list of environment variables on your server.
I can see that for a service that you would use several times a day (Twitter etc.) then it would be a major PITA.