We present attacks that have been discovered in the last years and the current state of security for the following web SSO sytems: - BrowserID a.k.a. Mozilla Persona - OAuth & OpenID Connect (Login with Facebook etc.) - SPRESSO (new SSO with privacy)
About us: We are both web security researchers at the University of Trier and members of the Maschinendeck hacker space.