-
Microcosm runs as an API, in which the frontend client (the website you see) talks to the API.
There is nothing at all that prevents other clients talking to our API. That could be 3rd party mobile apps, forks of this website that have been highly customised, whatever it is... you should be able to sign-in.
And those different clients should never have access to your password.
What I am saying is that we who run Microcosm trust you who sign-in, but we don't trust the client that you sign in to.
That is the big reason why sign-in is not a deeply integrated part of the main web page, and isn't just a couple of form fields. It allows us to support different clients in a way that will always protect your account.
Even if we did not use Persona, we would need to build something very close to what Persona is. It would have to be on a different domain (one that we trust), and it would have to be served as a popup or new window (the client should never have access to the password, so it cannot be a form field on this page), and once you have signed in an access token or some grant of permission to now act as if the site is you needs to be granted to the client.
With all of that in mind, knowing we're roughly going to stay with this model even if we change individual bits to solve problems... could you share what software you use, how you use it, what the limitations are, and how it proves to be inaccessible for you.
We may be able to solve those things, even without changing the way the fundamental process works.
You are reading a single comment by @Velocio and its replies.
Click here to read the full conversation.
Velocio
Please also integrate the login process to the current page of the website. Pop-up windows are difficult for anyone with a disability. I use software to automate logins, and it doesn't work with your site. I also use automatic software for clicking "next". Opera does this automatically on many websites so one can just page through forums with the spacebar.