As an RP, I want to be able to self-host `include.js` so that I can remove that single point of failure and decrease the attack surface of my site.

mozilla / persona-roadmap

A repository for user stories related to Mozilla's Identity efforts.

3 stars 1 forks source link

As an RP, I want to be able to self-host `include.js` so that I can remove that single point of failure and decrease the attack surface of my site. #47

Open fmarier opened 11 years ago

fmarier commented 11 years ago

There are three benefits:

Performance / availability: no need to load an external resource from a third-party domain (which could increase latency or add a single point of failure).
Security: reduction in the attack surface for security-conscious RPs.
Decentralization: in a fully decentralized system, the login.persona.org domain could be down and the whole system would still work.

r0bl0rd commented 11 years ago

@fmarier Please add the benefit to the story sentence. Also pick a priority label. Also pick an customer label that reflects at what stage of Persona adoption by the RP is blocked. Thanks.

fmarier commented 11 years ago