// authentication

All signals tagged with this topic

Reddit Forces Login Requirement Across All Interfaces

Reddit's move to require authentication on old.reddit.com eliminates the last freely accessible entry point to its content, collapsing a decade-old workaround that power users and privacy-conscious visitors relied on to avoid the algorithmic feed. Unauthenticated traffic generates no behavioral data and no ad impressions, making it economically invisible to Reddit's post-IPO business model. By shutting down old.reddit.com's open access, Reddit is treating casual browsing and read-only consumption as liabilities rather than assets—a reversal from its historical stance and a bet that mandatory login won't erode its user base materially.

Reddit kills anonymous access to its classic interface

Reddit is forcing authentication on old.reddit.com, eliminating the last major pathway for casual browsing without account friction. The move consolidates user tracking and funnels traffic toward the ad-dense redesign. Old.reddit.com has become the de facto refuge for power users and privacy-conscious visitors who rejected the algorithm-driven new site. Losing it will either push them to competitors like Lemmy and Bluesky communities or force them into Reddit's tracking stack. The change signals Reddit's calculation that retaining logged-in users for ad targeting matters more than keeping the product accessible—a bet that assumes its network effects are strong enough to absorb the added friction.

A Quarter of Top Websites Still Reject Passkeys Security

Passkeys represent the industry's best answer to password-based breaches, yet adoption remains stuck at 76% across major platforms—a gap that reflects the friction between security standards and actual deployment incentives. The naming-and-shaming mechanism works because it converts a technical issue into reputational risk, but the real constraint isn't awareness: it's that legacy authentication infrastructure is deeply embedded in user databases and enterprise systems, making the switchover economically expensive for companies with no immediate competitive disadvantage for lagging.

De Beers' blockchain gambit fails to stop lab-grown diamond surge

De Beers is deploying Tracr, its blockchain platform, to authenticate natural diamonds and create a provenance narrative—a defensive move that reveals the mined diamond cartel's real crisis: lab-grown stones are chemically identical, technically superior, and 40-50% cheaper, making authenticity claims irrelevant when consumers care more about price and sustainability. The 45% price collapse reflects a market that has already decided; blockchain traceability cannot rebuild demand for a product that younger buyers increasingly view as a commodity or ethical liability. De Beers is essentially paying to certify why its diamonds matter less, not more.

Google opens passkey portability across Android password managers

Google's move to enable passkey transfers between competing password managers dissolves a critical lock-in that made passwordless authentication impractical for ordinary users—the inability to switch services without losing access credentials. This standardization removes a major friction point that has kept password manager adoption fragmented and complicated, particularly on Android where competitive options already exist. For Google, this is a calculated trade-off: they gain credibility in the passwordless transition while accepting reduced lock-in, betting that ecosystem dominance in search and cloud services creates stickier retention than password manager exclusivity ever could.