Re:What Do You Think about This Seamless “Registering/Login”...
by netsharc on Sunday November 03, 2019 @02:38AM
(#21432661)
Huh, new idea, Google already prompts me on my phone when I log in to Google on a new device, why isn't there a service where instead of having to open my email and find that darned Medium email, it can push a question to one of my devices (also on PC) and I can just press "Yes that was me, let me in"? It can be some third party so I don't need a different software for each site..
[ Parent
| on HN ]
Re:What Do You Think about This Seamless “Registering/Login”...
by Spivak on Sunday November 03, 2019 @09:50AM
(#21434155)
Isn’t that basically logging in with Google? I mean Google isn’t asking you if you logged into Medium with a push but by the time you’re doing that Google already knows it’s you and pushed you a notification to log you in initially.
Re:What Do You Think about This Seamless “Registering/Login”...
by netsharc on Sunday November 03, 2019 @11:01AM
(#21434625)
Almost, but what if I'm uncomfortable with Medium having my real name and profile pic (which Google's SSO will share)?
I'd imagine Medium would offer "authentication through X", and I can either enter my id for X, or go to the X app and generate a new ID for use for Medium, and paste it on Medium. So next time I want to login to Medium, after entering my username, Medium's backend talks to X's backend (saying user with this ID wishes to login) X can prompt me on one of my devices. Medium can display a unique number on their page for me, and I can compare that to the number my X app is showing me to confirm it's me I'm letting myself in.
This is a 1 minute concept without considering creative ways it can be attacked. But I guess there wouldn't be any money to be made...