Re:If you care about user privacy, don’t use Facebook JavaSc...
by emmaglossy on Monday November 25, 2019 @07:20AM
(#21627441)
I think even when integrating a social login, a developer still needs to create a secure cookie and has "user" table in his/her database. Using social login is rather a convenient option for users as they don't have to create a new account.
[ Parent
| on HN ]
Re:If you care about user privacy, don’t use Facebook JavaSc...
by wool_gather on Monday November 25, 2019 @11:42AM
(#21629918)
Sure, but the stored credential is not reusable in another context. Which is not true for the majority of passwords. As a bonus, the authorization is probably also revocable via the external identity provider, although that's more about service-to-service permissions than account compromise.