Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Any website could use BrowserID by including cross-domain JavaScript that sent cookies to a third party (browserid) and hand the session token over for auth and then get it back. This went poorly versus the modern web’s hostility to third-party cookies.

For a website to use IRMA, it looks like they have to stand up a server component on their web server - it’s not enough to simply include Javascript like browserid, but it also isn’t subject to the third-party cookie failure of browserid.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: