<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div>Right. Facebook does the authentication part, which is verifying the person is who they say they are, then you do the authorization part, which is "this person is allowed to do ..."<br><br>This is useful if you want to streamline the account/login process. It's not as useful if you want privacy, since it requires your users to have signed up for Facebook, Twitter, Github, Google, StackExchange, whatever. Mozilla Persona might have fewer privacy implications.</div><div><br></div><div>There's also the possibility of simply not requiring a login at all. Identify the user based on a cookie, and/or a browser fingerprint. If identity / security isn't supremely important, and for a lot of webapps, they aren't, you can remove barriers to participation by forgoing any need for authentiation.</div><div><br>Doug Bell<div><a href="mailto:preaction@me.com">preaction@me.com</a></div></div><div><br>On Aug 7, 2015, at 11:21 AM, Richard Reina <<a href="mailto:gatorreina@gmail.com">gatorreina@gmail.com</a>> wrote:<br><br></div><blockquote type="cite"><div><div dir="ltr"><div><br></div><div>Also, if you can avoid doing your
own authentication altogether, delegating to an OAuth or OpenID provider
(Facebook, Twitter, Github, StackExchange, etc...), then you don't have
anything to worry about (cough)</div><span class="HOEnZb"><font color="#888888"><div><br>Doug Bell<div><a href="mailto:preaction@me.com" target="_blank">preaction@me.com</a><br><br><br><br></div><div>By this do you mean do not collect any passwords but just allow everyone to just login withe their facebook, twitter, github, etc accounts?<br><br><br></div></div></font></span>
</div>
</div></blockquote><blockquote type="cite"><div><span>_______________________________________________</span><br><span>Chicago-talk mailing list</span><br><span><a href="mailto:Chicago-talk@pm.org">Chicago-talk@pm.org</a></span><br><span><a href="http://mail.pm.org/mailman/listinfo/chicago-talk">http://mail.pm.org/mailman/listinfo/chicago-talk</a></span></div></blockquote></body></html>