OAuth for Browser-Based Apps has entered Working Group Last Call! Please share your comments in the next 2 weeks, even if it's just a general voice of support!
https://aaronparecki.com/2024/05/02/5/oauth-browser-based-apps-last-call
WeChat ID
aaronpk_tv
@aaronpk That was fun to read.
Couldn’t find the use of SE-stored PrivateKeys in the ML so far - was that considered?
The "consent fatigue"-issue is actually the most promising topic for me. It would be nice when we could find a common level of sensibility for “when should I [as a user] expect less comfort in exchange for more security/privacy” - I’ve not a solution just thoughts. This is also a discussion in the EUDI WG - the “inconvenience“ to use my ID card clarifies “importance”