Hacker News Reader

Did you read the article? This is an attempt to fix all those issues you list.

BrowserID only fixes those issues if it ends up as the only game in town. Otherwise, it's simply going to be tacked onto the end of a daunting list of other OpenID / BrowserID providers that users will have to choose from.

So now when your email address gets hacked, ALL your usernames and passwords to every website are also hacked!

At least with normal un/pw you need to request a password reset from the website.

I don't think we should be tying logins to email.

by tying all your logins to email, you're left with only one account that you can focus on keeping secure and un-hacked (or a few, as BrowserID allows for multiple emails). The BrowserID is also in talks about support one-off identity generation via the browser, bypassing email on sites which you don't want to identify with.

BrowserID supports password reset requests, which can be built into the browser

email is the single most user-recognized signifier of identity we have on the internet today. tying identity to anything other than email just seems silly

Reply on news.ycombinator.com