Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Are there any companies that do nothing but paid identity management?

One of the sticking points I've always had when using my TwitBookOogle account as an OAuth provider is that if something happens to that account & it gets locked out, I'm screwed everywhere that I've used that identity provider.

I'm also of the opinion that the only reason these companies provide identity is for user lock-in. I would pay money to have a reliable service that only cared about managing my identity securely online.



I don't think this entirely addresses what you want, but if you use OpenID, you can use a delegate. I use my own domain name for the purposes of an ID (http://abevoelker.com), which then defers to myopenid.com when I need to authenticate (you can see this in the HTML of the page). If something ever happens to myopenid.com, I just find a new OpenID provider and change the HTML of my homepage to point there (the site that is asking for my ID stores abevoelker.com, not myopenid.com).

The problem, of course, is that most sites do not support OpenID. The only ones that come to mind are StackOverflow and some blog commenting systems.


And even if you don't need a website, you can just configure the domain (or a subdomain) as a CNAME to MyOpenID. It's faster too, although probably not enough to be noticeable.


I guess "PIP" fits into this category. It's been in beta about as long as OpenID has been a term. I used it for a several years before finally giving in an using my Google Account for everything.

https://pip.verisignlabs.com/

EDIT: Oh.. it's now Symantec, and they will no doubt try and sell you their other products :( ... well at least it used to just be an identity provider.


That just feels like Symantec trying to sell me more garbage though




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: