| Login frequency (2) | Thursday, Nov 2, 2006 11:17 am |
I don't like using websites that require me to login each time I use them. Digg, MySpace, and PayPerPost are just a few examples. In order to access more content or to be able to use advanced features, I'm forced to login either every day or every new browser session. And what I don't understand is why this happens for reasons other than financial or personal security. I can understand when my bank makes me login every time. I can understand why Amazon won't let me buy things until I login. But MySpace? What exactly is the MySpace login process protecting me from? [Answer: MySpace (heh)] This is particularly annoying because I know how to fix it (I'm sure it's not a "bug", but rather a "feature"): Cookies. It's incredibly easy to make a browser accept a cookie that doesn't expire until 2085. For all intents and purposes (or intensive purposes; pick your poison), that'll keep you logged in forever. Gmail and Bloglines seem to have this figured out. I haven't logged into Bloglines since sometime around last fall. Gmail asks me to re-login every two weeks or so. I'm ok with that. It keeps me honest. On the other hand, Yahoo makes it seem like I'm logged in. I can access information and use advanced features. But when I submit my changes or updates, it says, "Hmm, you don't seem to be logged in. Please login for security purposes." If I'm not logged in, I shouldn't be treated like I am. That's just stupid. One less point for Yahoo.
Either my browser or one of its add-ons takes care of the nitty-gritty of logging on, all I have to do is click my mouse a couple of times and I'm good to go. No, I don't use one of the separate password manager type programs, just the functionality aleady built in. This seems to work for a wide variety of sites and takes place without my asking for it to. The very first time I go to a site that uses such, it simply asks me if I want it to remember it all.
Yeah I started using Firefox's password-remembering abilities a few months ago, and it's good for that kind of thing. But the problem is, logging in disrupts the flow of using a website. If I'm using a website, searching for things, and accessing that website's information, and then I'm required to login to continue, it's a problem. That's not security. Security would be requiring me to login before I start using the site. That was my point.