Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> Every respectable service allows you to create accounts using your email address, so please use that method to create your accounts.

This is a major take-away, too. I have used this as a litmus test for a while. If a service requires you to log in via one of these third parties, and doesn't offer a "create an E-mail based account" option, stay away! They're not a serious business.

Or, even better, favor services/stores that don't require you to create an account.



I mean, the article is pretty lean. It basically says, "Don't use OAuth because if you're locked out of your account on the OAuth provider, you won't be able to sign in." I don't disagree with that.

I don't think it's fair to expect every website I sign up for to be able to safely store passwords. OAuth is a convenient and much safer way to allow users to authenticate to your website or service. I don't think it's fair to dismiss every service that doesn't provide this option.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: