Re: Proposal: https://example.com/.well-known/modify-credentials

I like this proposal because it is straightforward, easy to understand, and easy to implement.

I recognize the desire to have more features, but I am afraid that adding more requirements would decrease the adoption considerably. 

We all have our ideas how the password change should work but there are just too many different ways the services implement it. The truth is that we can't even fully automate login forms today, the "creativity" there is endless. 

We will not be able to have a single spec that describes all possible password change scenarios.

From our perspective, I would rather have a simpler, widely adopted solution that is used as a stepping stone instead of a perfect spec.

Roustem
Founder of AgileBits and 1Password
https://1password.com <https://1password.com/>
1Password remembers all your passwords for you and keeps you safe behind the one password that only you know.