Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

There's more to OAuth than that, though, let's not throw out the baby with the bath water. Its original purpose - letting services access user accounts on other services without forcing the users to give out their password and complete control - still makes perfect sense and is often extremely useful.

Using OAuth as a authentication solution is the dangerous part; personally, I won't sign up for anything that doesn't provide either email/password or OpenID as an alternative, but I don't see what else can one do to "battle" that.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: