• ImgurRefugee114@reddthat.com
    link
    fedilink
    arrow-up
    5
    ·
    3 hours ago

    I’ve seen an annoying trend of places that make you enter an email first and then you press a button and then the a password field appears, and then you have to press another button to get to 2FA with a third button. Because two weren’t bad enough, I guess.

    • nocturne@piefed.social
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 hour ago

      I just had a log in require email, then the password field vanished, it requested my 2fa, then the password field returned.

  • DaddleDew@lemmy.world
    link
    fedilink
    arrow-up
    23
    ·
    5 hours ago

    How about not needing an account for things that don’t need accounts?

    I’ve just bought a Lego set for my nephew’s Christmas present and I couldn’t just check out with my credit card. No. I had to create a Lego account and join some sort of community thing with nickname, personal page and reward points systems and constant email spam. And of course two days after that I get informed that they were hacked. I can’t wait for the damn set to be delivered already so I can delete that account.

  • MonkderVierte@lemmy.zip
    link
    fedilink
    English
    arrow-up
    8
    arrow-down
    1
    ·
    5 hours ago

    Shouldn’t we reboot the internet and do it right from scratch, without compatibility to some 1980’s limitations and without executing foreign turing-complete code?

    • cadekat@pawb.social
      link
      fedilink
      arrow-up
      1
      ·
      edit-2
      1 hour ago

      Dude, HTTP basic auth has existed since the dawn of the internet (or nearly so) and it’s far superior to HTML forms…

        • cadekat@pawb.social
          link
          fedilink
          arrow-up
          1
          ·
          1 hour ago

          Sorry, how is an HTML form any less plaintext than HTTP basic auth?

          If you put them over TLS, they are equally secure.

          Edit: unless you meant passkeys, in which case I would agree with you.

  • cRazi_man@europe.pub
    link
    fedilink
    English
    arrow-up
    3
    ·
    4 hours ago

    A bunch of things add effort but also make sense. 2FA, etc… Fine. But why the fuck do I need to look so hard to find a login button now? Don’t you want me to login?

    Looking at you Mailbox.org. Go to main page, open side menu and look half way down this. No login button anywhere anywhere on the main page? WTF? Who decides these things? The login button used to be right there at the top and someone made the decision to move it.

  • cadekat@pawb.social
    link
    fedilink
    arrow-up
    2
    arrow-down
    2
    ·
    5 hours ago

    Passkeys aren’t actually bad, they just make the “remember my password” flow slightly easier and more secure.