← Back to context

Comment by lmm

3 years ago

Defaults and ease for site operators matter. Google could publish a blacklist but it would be opt-in, and if one blacklist starts being unreasonable then site operators can easily switch to another.

What's to stop Google from creating and using an internal blacklist - not for publishing.

  • Google can blacklist you from Google, but they wouldn't control your login to other sites the way they currently do with OAuth.