What is meta? ×
Meta Stack Exchange is where users like you discuss bugs, features, and support issues that affect the software powering all 133 Stack Exchange communities.

I would like to know how secure is it to use Google account authentication for logging in to Stack Overflow and other sister sites.

Can one take any additional security measures?

share|improve this question
    
I have seen buggy implementation of OpenID on the provider side, I doubt this will be the case for Google, though. –  nhahtdh Jun 25 '12 at 2:45

2 Answers 2

up vote 17 down vote accepted

With OpenID, your password is only given to your identity provider, and that provider then confirms your identity to the websites you visit. Other than your provider, no website ever sees your password, so you don’t need to worry about an unscrupulous or insecure website compromising your identity.

Full Source

share|improve this answer
1  
Great to see that you've started participating in meta again :) –  Manishearth Jun 25 '12 at 4:01
    
@ManishEarthwantsmorewaffles. I still think the same regarding Meta, The only reason this question of mine, had some effect is because I left comments to several very active users in those tags, and still that question got 2 close votes. (I can see how the community here acts like a herd, if those users weren't come, the question was closed long time ago.) I don't think this answer is even close as helpful as this answer. –  user173320 Jun 25 '12 at 7:41
    
Of course, you're free to have you own opinion, but I feel rather bad that you've forsaken meta just due to a few bad experiences. Regarding your first link, it is obviously a dupe at first glance unless we know your intentions--which you stated in the comments. So of course you'd still get a few close votes from those who don't look close enough at the comments. Specifying that you knew of the duplicates, and why you were posting another question would be a good way to prevent close votes. –  Manishearth Jun 25 '12 at 13:15
    
Regarding that answer, there were a few things that made it get downvoted. For one, most people didn't like the way you used the self-answer. Those points should have been in the question itself. So that may have made people already dislike the post. Then, most people support the current system, so of course you got downvotes there. And many people felt that the examples you used were baseless (see my answer there). So of course, with these three things against you, you got downvoted. Also, I don't see how it is "helpful". If it was part of the question it would be helpful. As an answer, no. –  Manishearth Jun 25 '12 at 13:25
    
@ManishEarthwantsmorewaffles. Another example to the list. showing that accepted answer is less than ideal. –  user173320 Jun 27 '12 at 10:57

Can one take any additional security measures?

Yeah - set up two-factor authentication for Google. Then someone has to steal your phone and your password to get into your Stack Overflow account.

(Also worth noting here - because this comes up all the time - that SE doesn't get access to anything on your Google account; Google tells us your email address and a unique ID so we can tell you apart from everyone else using Google to log in, and nothing else)

share|improve this answer
2  
Right... Like you guys don't send emails from our gmail accounts. We're not dumbs you know! –  user173320 Jun 25 '12 at 7:48

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .