Good morning!
I have a couple of additional questions regarding Discourse ID:
- I assume there is a central server managing credentials which is contacted by each site validating a discourse ID login? Therefore, although each individual website is not aware of other sites being visited, I assume that information is available centrally on the authorisation server? Do you have any plans to use this information, even if anonymised?
- Personally, I am happy with email/password (+2FA in some cases), and would not be in a hurry to adopt Discourse ID for my own logins. I also have no interest in reading websites on my phone, so therefore do not want to have the discourse app installed. I hope site operators retain the option to login with username/email and password going forward. For reference, I do not use any of the other offered SSO options either! I have my passwords managed in my own infrastructure, with each password only being used in one location, and stored encrypted when not in use.
I realise that I may represent an edge case, but hopefully people in my position will be considered by admins when looking at sign-on methods going forward.