I think we really need something like this. I wanted to use the perl.org authentication system for AnnoCPAN, but it wasn't ready yet for use by non-perl.org sites and I couldn't wait any longer. ;-) (but they are working on it)

It is possible to have a reasonably secure system where the password database is held by a central server and the other application servers don't know the user's passwords. That can be done by having the authentication server create a signed cookie that is passed to the application servers by the user as a form parameter. The main weakness is that if the central auth server is down, no one can log in to any of the application servers...

However, I find the idea of having an application server (such as cpanforum.com) receive the user's password for another site (such as perlmonks.org) and then use it to authenticate the user in permonks.org very, very bad from a security point of view. How do you expect every user to trust you with their perlmonks.org password?

In reply to Re: Perl Passport or Single Sign On? by itub
in thread Perl Passport or Single Sign On? by szabgab

Title:
Use:  <p> text here (a paragraph) </p>
and:  <code> code here </code>
to format your post, it's "PerlMonks-approved HTML":


  • Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
  • Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
  • Read Where should I post X? if you're not absolutely sure you're posting in the right place.
  • Please read these before you post! —
  • Posts may use any of the Perl Monks Approved HTML tags:
    a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
  • You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
            For:     Use:
    & &amp;
    < &lt;
    > &gt;
    [ &#91;
    ] &#93;
  • Link using PerlMonks shortcuts! What shortcuts can I use for linking?
  • See Writeup Formatting Tips and other pages linked from there for more info.