A Longitudinal Characterization of the Third-Party Authentication Landscape

Jarpehult, OscarLinköpings universitet,Databas och informationsteknik,Tekniska fakulteten (författare)

Many websites offer users to authenticate using third-party identity providers (IDPs) such as Facebook or Google. As part of the signup process, these websites often ask the user to give them additional permissions with the IDP (e.g., some data sharing or authorize some actions) that can have significant privacy implications. Motivated by the increased scrutiny of Facebook and other popular IDPs (e.g., due to the 2018 Cambridge Analytica scandal), we present a longitudinal analysis of the IDP usage and permissions changes over the past nine years (2012–2021) as well as a large-scale characterization of the current state. Our longitudinal analysis identifies trends and characterizes changes in both the IDP usage and permission agreements of different subsets of websites. For our large-scale analysis, we develop and share a Selenium-based measurement framework that we use to collect datasets. Using this data, we study the IDP usage across popularity ranges, the permissions used in the wild, and highlight differences between websites using different IDPs and those that do not. Our analysis shows increased IDP usage, especially among the most popular websites, and that the permission requests on average are becoming more modest but also brings forward significant exceptions that may need further scrutiny.

Josefsson Ågren, FredrikLinköpings universitet,Databas och informationsteknik,Tekniska fakulteten(Swepub:liu)n/a (författare)
Bäckström, MadeleineLinköpings universitet,Databas och informationsteknik,Tekniska fakulteten(Swepub:liu)n/a (författare)
Hallonqvist, LinnLinköpings universitet,Databas och informationsteknik,Tekniska fakulteten(Swepub:liu)n/a (författare)
Carlsson, Niklas,1977-Linköpings universitet,Databas och informationsteknik,Tekniska fakulteten(Swepub:liu)nikca89 (författare)
Linköpings universitetDatabas och informationsteknik (creator_code:org_t)

Av författaren/redakt...: Jarpehult, Oscar; Josefsson Ågren, ...; Bäckström, Madel ...; Hallonqvist, Lin ...; Carlsson, Niklas ...

Om ämnet

Kungliga biblioteket hanterar dina personuppgifter i enlighet med EU:s dataskyddsförordning (2018), GDPR. Läs mer om hur det funkar här.
Så här hanterar KB dina uppgifter vid användning av denna tjänst.