Let’s talk about usernames

Re:Let’s talk about usernames by kbenson on Monday February 12, 2018 @04:11AM (#16357477)

> I can see that for a service that you would use several times a day (Twitter etc.) then it would be a major PITA.

Well, even then, it depends on how long sessions last in combination with your browser cookie policy. How often do you authenticate your HN account?

[ Parent | on HN ]

Re:Let’s talk about usernames by cyberferret on Monday February 12, 2018 @04:16AM (#16357494)

True. Long running sessions would help. There are those that would argue it is a security risk though.

Even EnvKey that I mentioned above has a session cookie of some sort - I can usually use the app for several days after logging in, even if I close the app - but after that I am prompted to instigate the email with my unique login key.

[ Parent | on HN ]

Re:Let’s talk about usernames by kbenson on Monday February 12, 2018 @04:30AM (#16357542)

It would be nice if we eventually got to a point where control of whether a password was even allowed, how long your session cookies lasted, and the ability to list and invalidate all existing sessions was as common and expected as a password reset system.

[ Parent | on HN ]