Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

While it's true that Mozilla can't maintain a list of what services their users are using, there are still security implications to using Persona. Mozilla (or anyone who with their private key) can still enable access any user account on any Persona enabled site.

Persona is perfect for blogs, but using it for a service people may be paying for, or handles any private user information (postal address, private messages or posts on a forum etc) is a bad idea.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: