Hacker News Reader

If there was a strong federated identity provider, there would be one massive target for abuse and attack.

If there was a well written protocol and library to help with the independent federation of identities, that could be used by anyone, that would truly help the security of the vast majority of people.

View on HN

Oh, do you mean like the massive target for abuse and attack that are password managers?

Password management software centralizes the credentials of a given user. But each instance of the credential database is highly decentralized.

So it's only a massive target if you then recentralize those credential databases on a cloud storage service, for example.

Attacking the security of a password management system is different than stealing the credential database.

Reply on news.ycombinator.com