← Back to context

Comment by dijit

5 years ago

It’s not extremely hard to set up SSO with the big (tech) providers like GitHub and Google.

Would you be cool with “log in with google”?

Cool as a cucumber that has been cut off from every single account they have the moment somebody at Google (or an algorithm) doesn't like you. Good luck!

  • So, what's the alternative here?

    Either one of the big companies is controlling your account (and, crucially, securing it) or you have many accounts across many platforms.

    I'm genuinely at a loss here for solutions that are decentralised yet... centralised...

if OAuth had really succeeded at its goals and really federated authentication I'd be more interested in it, but no I'm not really comfy attaching my google account to random shitty things either because then we get into real name disclosure and such.

There's effectively only a few SSO providers that are viable to use on most of the internet (google, github, microsoft mostly) and they're all attached to more personal information than the forums were to begin with.

I do really wish federated identity had gotten off the ground the way it was promised though. That would be a better world.

What to do when Goog closes your account and won't reinstate it?

  • never understand the purpose of that kind of question. What do you do when the forum owner closes your account? Complain or go somewhere else, as long as there's an account someone can close it by definition.

    Chance that your Google account outlives everything else is if anything, pretty high.

    • The difference is that if Google blocks your account you might lose access to a hundred sites where you were using it for login. If a forum owner blocks your account you only use that one account.

      I've never used "sign in with Google" for anything.