News for hackers. Stuff that matters.

A comment on Security Update. Parent comment

Re:Security Update by bigiain on Thursday May 16, 2019 @11:05PM (#19935859)
You've just invented from first principles Single Sign On, OAuth, SAML, and Identity Providers.

You can rent it from AWS, of course. It's called Cognito.

https://aws.amazon.com/cognito/

You can also offload that responsibility for user data/credentials to Google/Facebook et al as you see many places with "Login with Facebook", making your users pay in privacy-invasion instead of bearing the burden of properly securing your user's PII yourself...

[ Parent | on HN ]
Re:Security Update by jimbo1qaz on Friday May 17, 2019 @03:30AM (#19937187)
Mozilla Persona was deaigned so "the identity provider does not know which website the user is identifying on." But it did nto catch on.

As a user, it seemed like "so i need to login to Google on Mozilla.org... it's just a wrapper for my Gmail and/or Mozilla account?"

[ Parent | on HN ]
Re:Security Update by mehrdadn on Friday May 17, 2019 @12:16AM (#19936219)
Not just a privacy invasion but also a single point of failure/an account shutdown.
[ Parent | on HN ]