zlacker

Agreed. GP comment was extremely weird to read, but I agree with the sentiment 100%.

>>notpus+(OP)
it's not weird, but it's just that you're not used to seeing google as an attacker. But they definitely are in this spec.

>>chii+R5
It might be my security hat speaking, but I see it as insecure, regardless of who is man in the middling the connection.

I'm not a tinfoil hat, but security can't hang it's hat on the kindness of strangers.

>>relaun+Vd
> I'm not a tinfoil hat, but security can't hang it's hat on the kindness of strangers.

Given that SSO is a massive security win and has been a game changer for removing passwords, I think it's been shown that delegation is extremely effective.

>>relaun+Vd
The main vulnerability isn't the man in the middle per se. Rather it's the unforgeable attestation of exactly what software an end-user is running, by the user's own hardware having been designed to betray the user's interests. This would allow powerful websites to prohibit the use of user-representing agents altogether, and essentially mark the end of the open web.

>>insani+VR
Why is removing passwords a massive security win? You're just moving the centralization from a password manager to SSO.

>>gunapo+l91
A few reasons.

1. Instead of needing 100 passwords, which increases the chance of users just choosing something and repeating it, you have 1 password.

2. Similarly, instead of needing 2FA on 100 sites they can just have 2FA on their SSO. In fact, the other sites don't even need to support 2FA - you get that "for free" with SSO.

3. SSO providers implement auth really well. They make it smooth, as in "I don't have to reauth when it's obviously me" and safe, as in "that might not be a valid auth, let's get them to 2fa again".

Of course, if you have a password manager then (1) is not a problem. But SSO is a lot simpler for users.

>>insani+VR
A "massive security win" would be using physical non-copyable keys instead of software palliative.

>>codedo+Rk1
Both things can be significant. It's worth noting that:

a) SSO has no financial cost. Hardware keys do.

b) SSO has been implemented and standard for years and is trivial for sites to support, hardware keys are much newer and are still rarely supported for authentication.

c) You can use hardware keys with SSO, which I'd recommend, and now you've gotten the benefits of both.

>>insani+Xe1
As long as using it remains optional, I don't mind that SSO systems exist. But I am personally allergic to them, so I fear the day that they are no longer optional.

>>JohnFe+mL1
I fully advocate for users to be in control over how they choose to identify themselves on the internet. It's part of why I'm against the integrity proposal despite seeing a lot of value in it.