News for hackers. Stuff that matters.

A comment on OAuth for the Open Web. Parent comment

Re:OAuth for the Open Web by EGreg on Saturday July 07, 2018 @07:18PM (#17481220)
The problem is, where do you store this list? The Web doesn’t have a way to store things except at a particular domain, and that domain will then know everything.

Anyone remember xAuth effort led by Meebo and others? It ran into the same objections for using a centralized domain for the time being even though it was great.

[ Parent | on HN ]
Re:OAuth for the Open Web by maxerickson on Saturday July 07, 2018 @07:19PM (#17481223)
Browsers could implement that part of the UI. Like address autofill.
[ Parent | on HN ]
Re:OAuth for the Open Web by EGreg on Saturday July 07, 2018 @07:35PM (#17481275)
And until then what do we do?
[ Parent | on HN ]
Re:OAuth for the Open Web by maxerickson on Saturday July 07, 2018 @07:38PM (#17481289)
Cry in our beverages of choice.
[ Parent | on HN ]
Re:OAuth for the Open Web by mblaney on Sunday July 08, 2018 @08:17PM (#17487086)
I made a bookmarklet that will store a url for you, and sign you in. You can create your own at: https://unicyclic.com/usb
[ Parent | on HN ]
Re:OAuth for the Open Web by lstamour on Sunday July 08, 2018 @11:55AM (#17484369)
The existing AccountChooser interface, which was Google’s preferred SSO strategy until their recent experiments with zero-click SSO, was hosted at AccountChooser.com by the OpenID folks.
[ Parent | on HN ]