How does stackoverflow implement openid

Consider it a little bit of insurance. Finally, this is also a lesson for those considering using third party authentication providers. See the original article here. Thanks for visiting DZone today,. Edit Profile. Sign Out View Profile. Over 2 million developers have joined DZone. Kind of…. Like 0. Join the DZone community and get the full member experience.

Join For Free. If I am login to SO via Google. Is this secure in this case? The risk to users of Stack Overflow So what can an attacker do if they hijack your Stack Overflow session? This one is a little more damaging though: If an attacker can add additional login accounts then they can create a persistent mechanism to get back into that Stack Overflow account at any time without needing to hijack the session. OpenID, the decentralized identity system that dispenses with usernames and passwords in favor of a single, portable web identity, promises to eventually change the way we login to our favorite websites.

While OpenID holds great promise, the reality today is that users sometimes don't understand it. Ten years on the internet is a long time. Let's celebrate the Stack Exchange sites that, as of Q3, have hit that milestone. It's a big day at Stack Overflow! Our Prosus deal has closed and our latest Dev Survey is live.

Prashanth Chandrasekar CEO. We're more than just StackOverflow. Ben Popper and Juan M. Leave a Reply Cancel reply Your email address will not be published. Stack Overflow is, as much as I could make it, an effort of collective programmer community.

Here's the original vision statement for Stack Overflow from back in April : So what is stackoverflow? From day one, my blog has been about putting helpful information out into the world. I never had any particular aspirations for this blog to become what it is today; I'm humbled and gratified by its amazing success.

It has quite literally changed my life. Blogs are fantastic resources, but as much as I might encourage my fellow programmers to blog , not everyone has the time or inclination to start a blog. There's far too much great programming information trapped in forums, buried in online help, or hidden away in books that nobody buys any more.

We'd like to unlock all that. Let's create something that makes it easy to participate, and put it online in a form that is trivially easy to find.