logoalt Hacker News

vel0citytoday at 3:24 PM2 repliesview on HN

This is why a lot of services have just moved to using email with magic links to log people in.

In the end for a lot of services controlling your email is defacto controlling the login.


Replies

fusslotoday at 5:03 PM

I am a vocal opponent to magic links via email (I am an unhinged person, in case it wasn't obvious before :) ).

I NEVER log into my mail from my laptop/desktop. I access my email via my phone's mail app.

So

1. try logging on via my laptop's browser

2. service sends a magic link to my email

3. click the link on my phone

4. now I'm logged in on my phone! not what I wanted!

show 1 reply
Terr_today at 5:41 PM

Links sent in plaintext over the network. :(

show 1 reply