Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I want to disagree with both of you - the sweet spot is often 3rd-party authN, 1st-party authZ:

* don’t try to implement the hard/annoying bits (strange access detection, account recovery, sending emails, password storage)

* keep ownership of your user list and users’ capabilities



I disagree with all three of you.

It depends on the use case.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: