News for hackers. Stuff that matters.
Re:Why we won’t be supporting Sign in with Apple by jborichevskiy on Monday June 29, 2020 @07:24PM (#23684630)
Yes! Especially once you start juggling multiple accounts for different companies and projects. Becomes a guessing game, and each wrong guess creates another account magically. Infuriating
Re:Why we won’t be supporting Sign in with Apple by warent on Monday June 29, 2020 @07:32PM (#23684728)
Time to create a new service to unify all your SSO accounts! One single SSO!
Re:Why we won’t be supporting Sign in with Apple by admax88q on Monday June 29, 2020 @11:13PM (#23686119)
OpenID would have done it, but Facebook and Google neutered it in favour of OAuth so they could cement themselves as primary players.
Re:Why we won’t be supporting Sign in with Apple by tannhaeuser on Tuesday June 30, 2020 @12:48AM (#23686659)
It's been some time last I checked, but isn't OpenID Connect provided anymore by Goog/Fb? Why wouldn't that be a reasonable choice if you wanted a protocol that, from the dev side of things, allowed you to uniformly target external auth providers, or your own?
Re:Why we won’t be supporting Sign in with Apple by admax88q on Tuesday June 30, 2020 @04:05PM (#23694207)
OoenID Connect is different. Its basically just OAuth2, and google/fb require the ap developer to register their app with google/fb in order to authenticate users.

Whcih is pretty bad for both developers and users, as a user I cant run my own identity provided and as a developer I have to spend time setting up accounts with ever identity provider i wish to integrate.

Original OpenID just let me as a user use a URL as my identity, so I could use any identity provider I wanted, including running one myself.

EDIT: There is a specification for dynamic client registration but nobody implements it as far as I've been able to tell.

Re:Why we won’t be supporting Sign in with Apple by jmull on Monday June 29, 2020 @07:38PM (#23684779)
Here comes SSSO! I can hardly wait!

Of course, there may be competing SSSO solutions...

Re:Why we won’t be supporting Sign in with Apple by toyg on Monday June 29, 2020 @09:31PM (#23685554)
We could have a Simplified Experience Single-Sign-On, or SESSO. Italian developers would adopt it enthusiastically.
Re:Why we won’t be supporting Sign in with Apple by NorwegianDude on Monday June 29, 2020 @11:07PM (#23686075)
If only there was a decentralized option that has already solved this... We could call it OpenID or something like that... Oh, wait..
Re:Why we won’t be supporting Sign in with Apple by rapnie on Tuesday June 30, 2020 @03:03AM (#23687443)
You also have IndieAuth that is slowly gaining more adoption.

https://en.wikipedia.org/wiki/IndieAuth

https://indieauth.net/

Re:Why we won’t be supporting Sign in with Apple by NorwegianDude on Wednesday July 08, 2020 @07:29AM (#23768865)
Cool, that looks awesome, thanks!
Re:Why we won’t be supporting Sign in with Apple by core-questions on Monday June 29, 2020 @07:39PM (#23684785)
Yes! and then I just sign in once into my single SSO signon!
Re:Why we won’t be supporting Sign in with Apple by dmitshur on Monday June 29, 2020 @10:29PM (#23685883)
And if you create an account accidentally, there’s often no way to undo that.

Next, if you don’t add a second-factor with to it, it becomes a ticking countdown until the account is compromised.