Hot answers tagged

31

The obvious choice: Guaranteed to exist and be supported by Stack Exchange for as long as Stack Exchange exists.


29

Based on the reasons given, it sounds like a reasonable step to remove WordPress as a standard selection option (although with a less than optimal short notice!). However, having to type in something manually each time will be a pain, so I would suggest that you replace the button with a "My Favorite OpenID Provider" button, which then fills in a user ...


23

Managed to add new Stack Exchange OpenID to my Stack Overflow account this way: Create new stackexchange account Login on https://openid.stackexchange.com/account/login to reach https://openid.stackexchange.com/user and click the "Use your own URL to log in" link Then copy the copy the url from the second entry similar to: https://openid.stackexchange.com/...


21

Even though we aren't responsible for any third-party support or lack thereof, MyOpenID affects Stack Exchange users, so yes, it is a good idea for us to warn people that they might want to move away from it. I'm exploring what the best way to reach users who only access Stack Exchange through MyOpenID. We will prompt them in some manner to add an ...


20

PBKDF2 based on HMAC-SHA1 with twenty-thousand iterations (the latter is set in our configuration). Just check the code (search for SecureHash and go from there).


19

Logins used on the Stack Exchange network (excepting Careers Stack Overflow) in the last 180 days (as of 2013-03-05): Google 389,341 Stack Exchange 105,598 Facebook 65,854 Yahoo 25,223 MyOpenID 14,950 Other 3,648 Launchpad 1,842 Verisign 718 Wordpress 671 ClaimId 471 ...


18

This question has been analyzed, from a technical perspective, over on IT Security.SE: see Appropriate password requirements for a login (OpenID) service/provider/delegate/thing. (See also Recommended policy on password complexity.) For instance, I'll highlight my answer, where I argue against going overboard on password restrictions, based upon usability ...


17

Someone is either playing a joke on you, or doing this to simply rattle you. They've been using your email across a few IP's to create unregistered accounts on random sites, where they basically paste the contents of your profile into a question. I've deleted four fictitious accounts so far, and I'm on the lookout for more. I've also made sure that the ...


16

First off: OpenID (and OAuth, which SE uses to support Facebook) is just a way for you to avoid yet another username + password. It does this by letting you say (in effect): Listen, you don't really need to know who I am. Just ask Google or Facebook or Yahoo or my own website - they'll vouch for me. It doesn't mean I'm giving SE access to my email, or ...


15

Since you are using Gmail and assuming your email is username@gmail.com, you can use username+whatever@gmail.com for the test account. Gmail ignores everything after the plus sign, and will redirect all emails send there to your regular account. After you register you will be asked if you want to associate the two accounts, the registration process is smart ...


14

If you have your own domain and homepage, the best you can do is using that as your OpenID account. Fortunately you don't need to set up a whole OpenID server there, as OpenID supports delegation. Just register to an OpenID provider which supports delegated accounts (MyOpenID was like this, but fortunately Stack Exchange is also okay), and add the following ...


14

You don't. Google dropped support for OpenID on April 20th. Presumably they thought this was a great way to celebrate Hitler's birthday. You can still log into Stack Exchange using Google because we rigged up something to support OAuth - "The New Hotness™" - behind the scenes. It looks like OpenID, mostly, and we make it work for old accounts by ...


12

The "correct" solution is to add an alternate OpenID provider to your account when you can access it. If you go to your profile you'll see a "my logins" link (#1 in the image below). Click that and you'll see something like the following dialog: (Obviously yours will only have one OpenID). Click on the "add more logins..." link (#2 in the image above) and ...


12

Facebook authentication is done via OAuth 2.0, but Data Explorer is currently only set up to handle OpenID authentication. However, most of the heavy lifting is done with the help of DotNetOpenAuth, so adding support for OAuth logins is entirely possible - it just hasn't been done yet. Since Data Explorer is open source, if someone is really interested in ...


12

I forget why this was a concern before (it might have been from before the user merging queries were written), but the current reason is just that it hasn't been implemented. Strictly speaking, merging users is possible in Data Explorer, it's just not set up yet to do it automatically in the case you're describing. I've got a todo item to make sure it's ...


12

Once upon a time, you used MyOpenID to log in on Stack Overflow. But back in August, you removed that credential from your account, adding instead a Google account and relying on that to authenticate you. Then, today, you tried to log in with your MyOpenID credentials again. Since those were no longer associated with your account, a new account was created. ...


11

For me, clearing the cache did not solve the issue, but clearing the stack exchange cookies did. Look here for instructions on how to clear cookies from individual websites. (When I did this, I cleared the cookies for stackexchange, stackoverflow, and superuser.)


11

You can manually enter the Steam OpenID URL (http://steamcommunity.com/openid) by clicking "Show more login options..." and then putting that URL into the box. Then you should be able to log in with Steam normally, and the accounts will be associated automatically. Alternatively, you can associate another OpenID account with your account on this site by ...


11

So, I looked around and found out that yes, both the data explorer and stackexchange.com still have a few obsolete openId providers listed in the login / signup options. I have pushed fixes to both, which will remove claimId (and a couple of others) that are no longer in operation. The obsolete openId providers will be gone in the next builds of either. ...


11

I've experienced the same issue since about the time the login system for SE sites changed. I finally managed to go around it. For me the case of this exact issue turned out to be HTTPS Everywhere. Disabling the addon allows for the login to work without issue. Enabling it again afterwards doesn't cause any issues with the rest of the site. The root cause ...


10

We refresh your authentication cookie pretty aggressively to help deter theft - this refresh can happen on any url that needs to know who you are. I introduced a bug that would access a user's cookie on routes that didn't need it, e.g. a feed of bug questions. The access happened after headers had already been sent, meaning the cookie refresh couldn't take ...


10

"Log in with Stack Exchange" is for folks who have created one of our own OpenID accounts. You don't have one of those far as I can tell. You're signing in with your Google account, so choose "log in with Google" instead. You can see what credentials you have on file with us by going to your profile while logged in and clicking "my logins". If you want to ...


10

It's not actually up most of the time even though it's supposed to still be operational. We don't want to even implicitly encourage people to sign up with myOpenID, so we removed the button. You can still sign in with it (assuming the service works) entering your myOpenID URL manually after clicking "show more login options" on the login page. Far as ...


10

Good idea, but I think the phrasing of "Other accounts not found" needs work. It sounds very negative and almost reads like an error message. For a user with existing accounts and is familiar with Stack Exchange, it shouldn't a problem, but a vast majority of the users who get this message will probably be brand new to Stack Exchange, and I'd be worried ...


10

When you go to "Add login" from your logins, you can always enter the OpenID provider's URL in the text box provided in the "More login options". For Stack Exchange the URL is openid.stackexchange.com.


9

Some of us got tired of the 90's method of having multiple hundred user ids and passwords because we use the web a lot. Open IDs improve security and user experience by allowing users to remember ONE or few universal credentials which are used to authorize sites.


9

We now de-emphasize MyOpenID as a login option due to the large number of problems they've been having lately. You can still sign in with it (provided their end of the bargain works) by typing the URL manually or clicking "Show more login options..." and using the MyOpenID button there as before. Related: unable to log in using myOpenID.com


9

I don't want to wait weeks and weeks for a response by using the contact form You wouldn't have had to wait that long. But I'm happy to answer here instead - it's a common request. And the answer is no. You can create an account like this - just log out of everything, and sign up for a new one using completely different credentials. And then never, ever, ...


9

You can change your OpenID. Just go to your profile -> click my logins -> click add more logins.... You can also remove your old login (i.e. YahooID).


9

It seems status-completed, answer from Geoff Dalgas: The GitHub PR was finally approved and merged: https://stackoverflow.blog/2019/11/11/announcing-support-for-github-authentication-in-stack-overflow/


Only top voted, non community-wiki answers of a minimum length are eligible