Australian domain register lets you login with your Facebook account.
Domain name registrar Whois.com.au has enabled social login functions to access your registrar account. In other words, instead of logging in with your registrar credentials you can login with Facebook, Twitter, etc.
I’m not aware of any other registrars that offer this, but I’m sure there are some off my radar.
My first reaction was that this scares me. If your Facebook account is compromised then you’ve given the keys to your registrar account.
So I checked in with the registrar to understand why it added social logins and what it plans to do from a security standpoint.
The company noticed that it was losing a lot of potential customers in its account registration process. It improved this by splitting the registration process into a couple screens. This helped get customers on the system, but then they found that customers had challenges remembering the usernames and passwords (who doesn’t?).
At that point Whois.com.au started evaluating options and determined that social logins would be beneficial.
Despite some security concerns, this option can actually improve your authentication if you login with Google since you can use their two-factor authentication. The company can easily turn off a login option if there’s a major security breach at one of the services.
And if it still concerns you, you have the option of just using a regular login.
Usernames and passwords is always a challenge and a major source of customer service requests for domain name registrars. It was the idea behind Hover’s “no hassle renewals” where customers can renew domains without logging in.
may be they can allow only read access no modification for facebook logins
The upside to this (though I agree about the scary security implications over compromised accounts) is registrant validation, if one inherently trusts Facebook.
The Law Enforcement and Trademark Interests to have really been pushing for registries and registrars to find a better ability to validate a registrant.
yes, it’s easier, but risky, I too prefer the non-social login
Not really a security issue with .au names.
Registrant changes are done at the registry level and registrars need to keep authorisation records.
Doesn’t Network Solutions also do that?
Same thought here about security when you wrote about this, Andrew. Perhaps the registrar utilizing this also ought to include like some footnotes or so to help users secure their logins despite that.
amor cedes las coasas