News for hackers. Stuff that matters.

A comment on How Popular Is “Sign in with Apple”?. Parent comment

Re:How Popular Is “Sign in with Apple”? by derefr on Tuesday January 28, 2020 @02:45PM (#22173321)
In most sensible authentication flows, your email address is not the primary key on your account, but rather just a credential with a link to an account, where an account HAS MANY credentials. You can usually "Sign in with X" and then "link" your now-existing account to credentials from "Sign in with Y" and "Sign in with Z."
[ Parent | on HN ]
Re:How Popular Is “Sign in with Apple”? by taeric on Tuesday January 28, 2020 @07:27PM (#22175793)
That doesn't work if the email address the service knows as you, is a fake proxy at Apple.
[ Parent | on HN ]
Re:How Popular Is “Sign in with Apple”? by derefr on Tuesday January 28, 2020 @08:01PM (#22176059)
It works as long as you add the second credential before losing access to the first.
[ Parent | on HN ]
Re:How Popular Is “Sign in with Apple”? by taeric on Tuesday January 28, 2020 @08:07PM (#22176089)
Fair. Still a central point of failure, but not much (any?) worse than the alternatives.
[ Parent | on HN ]