Hacker News Reader

So now when your email address gets hacked, ALL your usernames and passwords to every website are also hacked!

At least with normal un/pw you need to request a password reset from the website.

I don't think we should be tying logins to email.

by tying all your logins to email, you're left with only one account that you can focus on keeping secure and un-hacked (or a few, as BrowserID allows for multiple emails). The BrowserID is also in talks about support one-off identity generation via the browser, bypassing email on sites which you don't want to identify with.

BrowserID supports password reset requests, which can be built into the browser

email is the single most user-recognized signifier of identity we have on the internet today. tying identity to anything other than email just seems silly

Reply on news.ycombinator.com