85°F

Aaron Parecki

  • Articles
  • Notes
  • Photos

Thursday, September 24, 2020

← Older → Newer
bicycle
38 min
 
7.4 miles
 
bicycle
  • 11:03pm
    Asleep
    7:01am
    Awake
    7h 58m
    Slept
    24m
    Awake for
    Portland, Oregon, USA • 61°F
    Thu, Sep 24, 2020 7:01am -07:00
  • RevK®'s ramblings: How not to QR (NHS COVID-19 App) (www.revk.uk)
    Thu, Sep 24, 2020 7:03am -07:00 #qr #qrcode #url
  • https://twitter.com/eberdna/status/1309136159868678150?s=12
    Aaron Parecki
    If you tell me what URL you're entering at indielogin.com to start the flow I can probably tell you what's going on.
    Portland, Oregon • 59°F
    Thu, Sep 24, 2020 7:24am -07:00
  • Jim Manico https://twitter.com/manicode
    ASVS is considering dropping the recomendation to store tokens in HTML5 session storage. Any opposed?
    Portland, Oregon • 59°F
    Thu, Sep 24, 2020 11:38am +00:00 (liked on Thu, Sep 24, 2020 7:26am -07:00)
  • Gary https://twitter.com/every_daydad   •   Sep 24
    Cannoli day!! 🤯🤯

    Seriously thanks to all, I honestly cannot believe this has gone anywhere near this far.
    Aaron Parecki
    huge congrats! 🍾 also why do I keep thinking cannoli is a pasta?
    Portland, Oregon • 59°F
    3 likes 1 reply
    Thu, Sep 24, 2020 7:57am -07:00
  • Gary https://twitter.com/every_daydad
    It took almost 4 years for the first 100k and under a year for the second 100k 🤯
    Portland, Oregon • 60°F
    Thu, Sep 24, 2020 2:56pm +00:00 (liked on Thu, Sep 24, 2020 8:16am -07:00)
  • Aaron Parecki
    Contributions from: Argentina, China, France, Germany, Russian Federation, United Kingdom, Vietnam
    Thu, Sep 24, 2020 8:30am -07:00
  • Page dewarping (mzucker.github.io)
    Thu, Sep 24, 2020 11:29am -07:00 #scan #scanner #archive #books #warp
  • Photo - “Wear a damn mask” - Joseph https://twitter.com/photojoseph
    Well… I want one.
    Portland, Oregon • 68°F
    Thu, Sep 24, 2020 6:30pm +00:00 (liked on Thu, Sep 24, 2020 11:42am -07:00)
  • Vittorio https://twitter.com/vibronet
    Going thru the unprocessed transcripts of the next http://identityunlocked.com episode, heavily featuring PKCE as interpreted by the transcribers, be like:
    /cc @aaronpk
    Portland, Oregon • 69°F
    Thu, Sep 24, 2020 9:59pm +00:00 (liked on Thu, Sep 24, 2020 2:59pm -07:00)
  • Zach Silveira https://twitter.com/zachcodes
    The Ultimate @Yubico setup guide for developers

    Setup GPG, git commit signing, ssh, and more, across multiple yubikeys!

    https://zach.codes/ultimate-yubikey-setup-guide/
    Portland, Oregon • 69°F
    Thu, Sep 24, 2020 1:29pm +00:00 (liked on Thu, Sep 24, 2020 3:05pm -07:00)
  • Jeremy Keith https://adactio.com/

    The failed promise of Web Components – Lea Verou

    September 24th, 2020

    A spot-on summary of where we’ve ended up with web components.

    Web Components had so much potential to empower HTML to do more, and make web development more accessible to non-programmers and easier for programmers.

    But then…

    Somewhere along the way, the space got flooded by JS frameworks aficionados, who revel in complex APIs, overengineered build processes and dependency graphs that look like the roots of a banyan tree.

    Alas, that’s true. Lea wonders how this can be fixed:

    I’m not sure if this is a design issue, or a documentation issue.

    I worry that is a cultural issue.

    Using a custom element from the directory often needs to be preceded by a ritual of npm flugelhorn, import clownshoes, build quux, all completely unapologetically because “here is my truckload of dependencies, yeah, what”.

    Portland, Oregon • 69°F
    Thu, Sep 24, 2020 6:32pm +00:00 (liked on Thu, Sep 24, 2020 3:33pm -07:00) #webcomponents #customproperties #javascript #html #markup #complexity #declarative #frontend #development #exclusion
  • Pushkar Jaltare https://twitter.com/Pushkar2911   •   Sep 24
    @aaronpk Do you have any plans of making "The Little Book of OAuth 2" available as ebook? I bought you another book as PDF and would love to do the same for this one.
    Aaron Parecki
    I thought about it, but most of the content is the specs themselves, which are already available online in a variety of formats, so I'm not sure it would add much value. Plus formatting an ebook is a *lot* of work 😅
    Portland, Oregon • 68°F
    1 like
    Thu, Sep 24, 2020 4:41pm -07:00
  • rabble https://twitter.com/rabble
    Decentralized naming systems like @HNS and @namecoin seem focused on competing with DNS. They're also hopelessly complicated. Is there equivalent for user names instead of DNS?
    Portland, Oregon • 67°F
    Thu, Sep 24, 2020 6:43pm +00:00 (liked on Thu, Sep 24, 2020 5:39pm -07:00)
  • rabble https://twitter.com/rabble   •   Sep 24
    Decentralized naming systems like @HNS and @namecoin seem focused on competing with DNS. They're also hopelessly complicated. Is there equivalent for user names instead of DNS?
    Aaron Parecki
    I think the challenge is you need to drop the idea of creating a global namespace. Otherwise you end up with DNS or blockchain solutions, both of which are centralized. You need something that doesn't rely on the entire system being aware of all other names.
    Portland, Oregon • 67°F
    1 like 40 replies
    Thu, Sep 24, 2020 6:15pm -07:00
  • Lawrence of Dystopia https://twitter.com/laprice   •   Sep 25
    so, like URI s and URLs? but with relative namespaces?
    Aaron Parecki
    I don't think there's a clear answer yet. But I'm thinking something that matches more how people communicate identities in person. Plenty of people share the same name and it's not a problem the majority of the time during normal communication.
    Portland, Oregon • 67°F
    3 replies
    Thu, Sep 24, 2020 6:19pm -07:00
  • William K. Wolfrum https://twitter.com/Wolfrum
    The road to fascism is lined with people telling you to stop overreacting.
    Portland, Oregon • 67°F
    Mon, Sep 21, 2020 1:36pm +00:00 (liked on Thu, Sep 24, 2020 6:20pm -07:00)
  • rabble https://twitter.com/rabble   •   Sep 25
    Sure and that social distance way works for searching online but I hear folks saying their account names all the time. It’s important we do find a solution.
    Aaron Parecki
    heh social distance
    Portland, Oregon • 66°F
    1 reply
    Thu, Sep 24, 2020 6:24pm -07:00
  • Blaine Cook https://twitter.com/blaine   •   Sep 25
    I know this is maybe something we'll never agree on, but I don't see the problem with a global namespace? Isn't it a feature? It makes the web work! It makes the phone system work! It makes email work!
    Aaron Parecki
    I wasn't saying either one is better than the other. Just that whether it's a global namespace is a property that then has all these other side effects when trying to maintain that property in a system
    Portland, Oregon • 66°F
    1 like
    Thu, Sep 24, 2020 6:26pm -07:00
  • Blaine Cook https://twitter.com/blaine
    The reality is that the only real question of a global namespace is a regulatory one - who gets ultimate control of it? And in that, DNS is actually not a bad approach and has spent ~30 years ironing out regulatory bugs and has found a pretty stable spot.
    Portland, Oregon • 66°F
    Fri, Sep 25, 2020 1:25am +00:00 (liked on Thu, Sep 24, 2020 6:26pm -07:00)
  • Blaine Cook https://twitter.com/blaine   •   Sep 25
    The reality is that the only real question of a global namespace is a regulatory one - who gets ultimate control of it? And in that, DNS is actually not a bad approach and has spent ~30 years ironing out regulatory bugs and has found a pretty stable spot.
    Aaron Parecki
    Agreed! And all the blockchain versions of a global namespace have nowhere near this level of experience in maintaining the system in the long term, and are very likely much more fragile than DNS
    Portland, Oregon • 66°F
    2 likes 29 replies
    Thu, Sep 24, 2020 6:27pm -07:00
  • rabble https://twitter.com/rabble   •   Sep 25
    I walked through setting up an account and identity on handshake. First the cheapest one was $49 and took an unbelievable amount of technical knowledge and steps. It made dns seem simple. I don’t see how normal users would ever use it.
    Aaron Parecki
    with that description, I don’t see how abnormal people would use it either!
    Portland, Oregon • 66°F
    Thu, Sep 24, 2020 6:40pm -07:00
  • Blaine Cook https://twitter.com/blaine   •   Sep 25
    i.e., is that something that *must* happen with consent from email providers/domain controllers? Or is it something that could be baked into ssb/deltachat/similar? What would ownership verification look like in that case?
    Aaron Parecki
    the “I’m locked out of my account” problem is not going away any time soon, and is a real hurdle in building this kind of thing in a decentralized way
    Portland, Oregon • 66°F
    1 like
    Thu, Sep 24, 2020 6:42pm -07:00
  • Blaine Cook https://twitter.com/blaine
    LOL. 90 days for trademark owners to register. Seems legit.
    Portland, Oregon • 66°F
    Fri, Sep 25, 2020 1:43am +00:00 (liked on Thu, Sep 24, 2020 6:45pm -07:00)
  • Blaine Cook https://twitter.com/blaine   •   Sep 25
    For sure; it just requires specific functionality on the provider's side. With webfinger, we always imagined that you could enable "portability" by setting a redirect or a pointer, again provider-dependent.
    Aaron Parecki
    in a way, email already is portable. My email address is on my domain, parecki.com, but it’s actually a Gmail account under the hood. If i want to move that to another provider, I can, and I don’t need to tell anyone a new email address. This is of course thanks to DNS 🙃
    Portland, Oregon • 66°F
    2 likes 9 replies
    Thu, Sep 24, 2020 6:47pm -07:00
  • Blaine Cook https://twitter.com/blaine
    For sure; it just requires specific functionality on the provider's side. With webfinger, we always imagined that you could enable "portability" by setting a redirect or a pointer, again provider-dependent.
    Portland, Oregon • 66°F
    Fri, Sep 25, 2020 1:44am +00:00 (liked on Thu, Sep 24, 2020 6:53pm -07:00)
  • rabble https://twitter.com/rabble   •   Sep 25
    So if you’re able to control a domain name and set Mx records you’ve got portability. It actually works pretty well but it’s not used for individuals so much as organizations. What’s the equivalent or way to extend it to individual users.
    Aaron Parecki
    For some reason DNS providers haven't iterated on the UX around configuring records much. If as much time and money were spent on making DNS easier to use without understanding all the terminology as was spent on all the blockchain tech, we'd be in a much better place right now.
    Portland, Oregon • 65°F
    1 like 3 replies
    Thu, Sep 24, 2020 7:18pm -07:00
← Older → Newer

Hi, I'm Aaron Parecki, Director of Identity Standards at Okta, and co-founder of IndieWebCamp. I maintain oauth.net, write and consult about OAuth, and participate in the OAuth Working Group at the IETF. I also help people learn about video production and livestreaming. (detailed bio)

I've been tracking my location since 2008 and I wrote 100 songs in 100 days. I've spoken at conferences around the world about owning your data, OAuth, quantified self, and explained why R is a vowel. Read more.

  • Director of Identity Standards at Okta
  • IndieWebCamp Founder
  • OAuth WG Editor
  • OpenID Board Member

  • 🎥 YouTube Tutorials and Reviews
  • 🏠 We're building a triplex!
  • ⭐️ Life Stack
  • ⚙️ Home Automation
  • All
  • Articles
  • Bookmarks
  • Notes
  • Photos
  • Replies
  • Reviews
  • Trips
  • Videos
  • Contact
© 1999-2025 by Aaron Parecki. Powered by p3k. This site supports Webmention.
Except where otherwise noted, text content on this site is licensed under a Creative Commons Attribution 3.0 License.
IndieWebCamp Microformats Webmention W3C HTML5 Creative Commons
WeChat ID
aaronpk_tv