Web Applications Stack Exchange is a question and answer site for power users of web applications. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

There are some applications that you can add to Google Chrome.

However, some of them require you to log in to a Google account. During that process you get a message along the lines of "xxx is asking for some information from your Google account". You're given the option to approve or deny. And an option to remember the approval.

What information is it accessing or can it access? I'm wanting to know if this a potential security problem.

share|improve this question

migrated from superuser.com Jan 24 '12 at 13:14

This question came from our site for computer enthusiasts and power users.

I've found the answer.

Google login is based on OpenID which they call "Federated Login".
See this link: Authentication and Authorization for Google APIs

What could be exchanged is through the OpenID attribute exchange protocol? Currently, Google only supports the following attributes (see section "Attribute exchange extension" in the provided link)

  • country
  • email
  • firstname
  • language
  • lastname

So to answer the second part of my question, about it being a security problem. Well, only if you want to keep the information in those fields private.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.