Take the 2-minute tour ×
Web Applications Stack Exchange is a question and answer site for power users of web applications. It's 100% free, no registration required.

There are some applications that you can add to Google Chrome.

However, some of them require you to log in to a Google account. During that process you get a message along the lines of "xxx is asking for some information from your Google account". You're given the option to approve or deny. And an option to remember the approval.

What information is it accessing or can it access? I'm wanting to know if this a potential security problem.

share|improve this question
add comment

migrated from superuser.com Jan 24 '12 at 13:14

This question came from our site for computer enthusiasts and power users.

1 Answer

I've found the answer.

Google login is based on OpenID which they call "Federated Login".
See this link: Authentication and Authorization for Google APIs

What could be exchanged is through the OpenID attribute exchange protocol? Currently, Google only supports the following attributes (see section "Attribute exchange extension" in the provided link)

  • country
  • email
  • firstname
  • language
  • lastname

So to answer the second part of my question, about it being a security problem. Well, only if you want to keep the information in those fields private.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.