This one I’m really confused on, and we should probably chat ... • Aaron Parecki

47°F

Blaine Cook https://twitter.com/blaine • Nov 19
In the meantime, IndieAuth is, imho, a step backwards. OAuth/OIDC sign-in with login_hint works *great*; the lack of auto-/no-registration / a public key version is a real bummer, though.

This one I’m really confused on, and we should probably chat about it to clear things up. IMO OIDC is more of a barrier here because the default is that clients need to register. With IndieAuth there is no expectation of client registration at all.

Portland, Oregon • 45°F

Wed, Nov 18, 2020 8:18pm -08:00

1 reply
Have you written a response to this? Let me know the URL:
- Blaine Cook twitter.com/blaine
  
  Yeah, client registration is a hold-over, and unnecessary for domain validation (same as letsencrypt). It's unfortunate OIDC didn't do a better job here. To be clear, I'm totally pro-IndieAuth, because the _protocol_ doesn't matter as long as it's secure. It's the UX / messaging.
  
  Thu, Nov 19, 2020 5:19am +00:00 (via brid-gy.appspot.com)

Posted in /replies using indigenous.abode.pub/ios