Recent answers to Why Mozilla-Developer-Network/MDN Needs Access Into My GitHub Or Google Account To Login !? & Why MDN Does Not Allow To Use Mozilla Account Based Login ? isn't it Violation Of Privacy ?https://support.mozilla.org/ar/questions/13048802020-09-18T20:48:37-07:00quoting philipp "no write access...or other data whatsoever"
ANY TYPE OF ACCESS into GitHub/Google2020-09-18T20:48:37-07:00atErikhttps://support.mozilla.org/ar/questions/1304880#answer-1351132<p>quoting philipp "no write access...or other data whatsoever"
ANY TYPE OF ACCESS into GitHub/Google account to Login into ANY-SITE is anti-privacy &amp; anti-security , &amp; risky &amp; not good security practice.
there are always many other alternative Privacy-Right respecting &amp; comparatively more secure/safer solutions.
Very very simple &amp; safe solution is this&nbsp;: a website can send a RANDOM-NUMBER code into my specified email-adrs, &amp; then it can allow me to login only after i can give it that code , thus this process/way can verify/establish i'm the user of that email-adrs.
</p><p>AND , if a website forces me to provide my Phone# ( from a real/physical phone obtained from AT&amp;T/Verizon/etc Cell / Wireless Carrier Service Provider, or Land line # , etc ) to send a SMS code or voice code , ( and does not allow me to use any FREELY obtained VOIP/etc phone# ) TO LOGIN INTO A WEBSITE , then i want that website to PAY ME MONTHLY $40 TO GET A REAL PHONE # FROM AT&amp;T/Verizon/LandLineProvider/etc.
if the website allows me to use free Phone# from Google-Voice or other VOIP provider or any other low-cost or free MVNO provider, etc , then i do not want the site to provide me monthly fee for the phone# service as its free.
</p><p>If mozilla gave me all the things needed for creating a stable GitHub account, then i can create a new account with no-repo &amp; no-data in it , then use it for Login into Mozilla-MDN site.
</p><p>if mozilla gave me all the things (PHONE# from AT&amp;T/Verizon/LandLine/etc) required for creating google/ggl account then i can create new ggl account &amp; give access to that ggl-account to Login into Mozilla-MDN site.
</p><p>like many users , i want more security &amp; privacy , i want to give lesser chance to be abused , ( i do not want to give a chance to someone to abuse the 3rdparty access of "Mozilla" entry inside the GitHub/Google account , even though it has "no-write-access" or "no-data-access" ) ,
i do not want convenient or faster things ( faster things are hacked also ... faster ).
</p><p>can mozilla give guarantee &amp; declare publicly that&nbsp;: "Mozilla's access to user's Github/Google account to login into Mozilla-MDN site will never be hacked/abused. And if hacked/abused then this $$$$ amount will be issued."
even with such guarantee , i or any person with little brain will-not &amp; should-not trust such statement , as it cannot be fulfilled / not possible to fulfill by any company or anyone in this earth or any place in this universe.
</p><p>anyway, just found a related June-2018 discussion on Mozilla-Discourse site, here:
<a href="https://discourse.mozilla.org/t/alternatives-to-github-for-authentication/29147" rel="nofollow">https://discourse.mozilla.org/t/alternatives-to-github-for-authentication/29147</a>
</p><p>so my take from those discussion is , Mozilla-MDN site still has:
not applied/adopted Firefox account based login,
not created Mozilla's own OAuth or 2FA in Firefox/Mozilla account,
as of Sept-2020&nbsp;!!&nbsp;:(
</p><p>i have just tried to login into Mozilla-Discourse site , it allows+adopted to login via Firefox/Github/Google&nbsp;:)
i have obviously chosen the "Firefox"-account based login there, &amp; then it successfully verified me &amp; allowed me to create account in Mozilla-Discourse &amp; login.
</p><p>when will other Mozilla sites (i.e.: Mozilla-MDN site) also do that/similar&nbsp;?
</p>the only thing that the mdn requests while signing in with your github account is your email address2020-09-18T03:52:18-07:00philipphttps://support.mozilla.org/ar/questions/1304880#answer-1350992<p>the only thing that the mdn requests while signing in with your github account is your email address - no write access to repository or other data whatsoever.
</p>