Thread
Stories related to "The “email is authentication” pattern" across the full archive.
I once lost access to a 15 year old google account and have also been geolocked out while traveling. Although the recovery emails didn't help then, I still broadened my footprint and especially maintained emails on hosted domains. I see holes in this too, however. Is there anything foolproof?
I (...
I liked Flickr's now-deprecated [hash-the-params](http://www.flickr.com/services/api/auth.howto.web.html) authentication because it was simple (though [flawed](http://vnhacker.blogspot.com/2009/09/flickrs-api-signature-forgery.html), it is fixable).
Now it seems like most sites are using OAuth 1....