Hi Will!
> How are you guys coding your user-registration module?
We have used tgext.registration2 for a while.
In fact, user registration is bad ;-) Why do I have to fill a form,
wait for email, click the link, create a new password, and it takes an
hour or so, if I just wanted to drop a small comment to a forum post?
1) OpenID is much better as soon most internet users have an account
on a large web-service provider like google (or yandex, or lots of
others) or can easily get one. Just let the user login with his OpenID
and then display a form so that he fills it with data not available
from his OpenID provider via nonce.
2) For corporate sites, it's better to forward auth requests to
corporate user database, say, LDAP; or one can manually create user
accounts for corp.users (in a small corp ;-) so they differ from their
'main' account for security reasons
3) one can mix both techniques so staff login with their login-pass
pair and others just use their OpenID.
P.S. It seems I'm not alone with this opinion, and that "password
hell" is also described in a great book 'Why software sucks' by David
S Platt.
--
Sergei
--
You received this message because you are subscribed to the Google Groups
"TurboGears" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to
[email protected].
For more options, visit this group at
http://groups.google.com/group/turbogears?hl=en.
