Google's official developer blog for the Google+ platform, announcing APIs, Sign-In, Hangouts API, share buttons and recommendations.
HN links it for Google+ API and Sign-In announcements, and commenters discuss Google's stance against frictionless sharing and the lack of a write API.
> A number of these FIDO posts are cropping up and I still don't really get it. Someone in a previous one explained the benefits over and above my current password manager set up.
This post and the last one[0] are the same exact statement, this one was just posted again.
> It seems to me a centralised single point of weakness open to exploitation from the multi national corps.
IMO this is mostly a misunderstanding, the proposal is a commitment to implementing a host of features to make regular users actually consider using security keys:
- Apple and Google are implementing a syncing security key service, likely on top of their existing password manager infrastructure [iCloud Keychain[1,2] on Apple devices]
- They are also committing to wireless Webauthn-over-BLE technology, so you can do things like scanning a QR Code on your Windows desktop to sign in with a security key stored in your iCloud Keychain
Otherwise, these concerns of control have existed for nearly a decade with Sign in with Google[3]. Now they're making it more secure by not having a third-party as the actual broker between the user and the service provider, they just assist in the UX department.
0: https://news.ycombinator.com/item?id=31272867
1: https://photos.google.com/share/AF1QipNNgpbkj1r58PsJK_RHlsfAu7NdjZkO2CTosBbEWPzzdP726W0dRgfFfqk_ruSeIQ?key=aUNBQzFOY1l6SG9CTmloTEJtNWZoSHUyV0tibnJ3
2:…
Why would that happen? Google specifically opposes "frictionless sharing"[0] (I think that's one of the reasons Google+ doesn't really have a write API - they don't want apps posting "on behalf" of users). And Google+ emphasizes sharing things with the right people using circles. Don't spread FUD.
[0]: http://googleplusplatform.blogspot.co.uk/2013/02/google-plus-sign-in.html
Why all the downvotes? Isn't the technology they're supporting important? :P There's not even any mention on their developer blog here: http://googleplusplatform.blogspot.com/2011/08/stepping-onto-google-platform.html