Hacker News Reader

I would love to have seen Windows Integrated Authentication evolve into an open adopted standard: https://support.microsoft.com/en-us/help/258063/internet-exp...

Intranet web apps didn't even require a manual login, now we've regressed and have more web apps, frequently less AD authentication (cloud apps) and more random passwords written on post it notes.

View on HN

AD (and Kerberos) require the client to have a ticket from a central authority, and also require the server to be trusted by that same authority. It won't really work for the "wild" internet.

That's basically Kerberos, which ad is "built" on and extends. I believe both Kerberos and ad require the server to be known to the ad or Kerberos master.

In some sense that has morphed into login with Facebook/Google

Kerberos set the standard for a lot of authentication protocols and it's model of delegated authentication can be seen in the SAML and OpenId Connect protocols

Reply on news.ycombinator.com