MagicSquared

Security and privacy

authentication

SHOW HN2021

7points
7comments
#2,231of 2,533 in 2021
Top 89%of 2021 by points

How HN took it

QuietFewer than 5 comments about the project

0 positive, 1 neutral or asking, 1 mixed, 2 critical, out of 4 comments about the project.

Design: 0 for, 1 againstExecution: 0 for, 1 against

The thread, comment by comment

Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.

positive neutral or mixed critical about another commenter or something else the maker

What HN said

What people liked

  • Easy integration with clear instructions

    From 1 comment
    • The idea is great and the instructions clear and easy to follow for a quick integration. (the localhostmagicsquared.net workaround is a brilliant idea) But I see you are using…
      alin23 on HN
  • Localhost workaround is a clever idea

    From 1 comment
    • The idea is great and the instructions clear and easy to follow for a quick integration. (the localhostmagicsquared.net workaround is a brilliant idea) But I see you are using…
      alin23 on HN

Objections

  • Server holding the private key could forge logins to any site using it

    From 2 comments
    • The idea is great and the instructions clear and easy to follow for a quick integration. (the localhostmagicsquared.net workaround is a brilliant idea) But I see you are using…
      alin23 on HN
    • I don't think this problem is solvable. The server must be able to generate signed JWTs, so if you have access to the server, you'll be able to do that. The cryptographic details…
      amadeuspagel on HN
  • Magic link emails were slow to arrive

    From 1 comment
    • Tried the demo. Took forever to deliver the email (still haven’t received it yet) We built an in-house solution for this and the biggest issue was bots opening the link. You will…
      longnguyen on HN
  • Email link bots may consume links before users click them

    From 1 comment
    • Tried the demo. Took forever to deliver the email (still haven’t received it yet) We built an in-house solution for this and the biggest issue was bots opening the link. You will…
      longnguyen on HN
  • Privacy policy was missing

    From 1 comment
  • UI looks inconsistent

    From 1 comment

Requests

  • Provide a privacy policy

    From 1 comment
  • Improve UI consistency

    From 1 comment

Questions

  • Is there a more secure way to avoid forging risk without much friction?

    From 1 comment
    • The idea is great and the instructions clear and easy to follow for a quick integration. (the localhostmagicsquared.net workaround is a brilliant idea) But I see you are using…
      alin23 on HN
  • Where is the privacy policy?

    From 1 comment

Category, keywords, summaries and labels on this page were made by AI (Thread Reader v2) and not checked by hand. Each point links to the comments it came from.

Add a badge to your READMEShown on HackerShow
[![Shown on HackerShow](https://hackershow.org/badge.svg)](https://hackershow.org/show/26681405)