77°F

Aaron Parecki

  • Articles
  • Notes
  • Photos
  • Aaron Parecki
    at Portland International Airport (PDX)
    Portland, Oregon • Thu, June 13, 2019 1:11pm
    45.589391 -122.593457
    Feels like I haven't been here in a long time!
    Portland, OR, United States
    6 Coins
    Thu, Jun 13, 2019 1:11pm -07:00
  • Train
    9.01mi
    Distance
    22:07
    Duration
    12:48pm
    Start
    1:10pm
    End
    Portland, Oregon
    Thu, Jun 13, 2019 1:10pm -07:00
  • San Francisco
    Jun
    13
    Jun
    14
    June 13-14, 2019
    San Francisco, CA, USA
    permalink #okta
  • sentenza https://twitter.com/delphinauge   •   Jun 13
    May I help by providing all the questions that I ask myself after being new to and diving into the OpenId Connect subject?
    Aaron Parecki
    Yes that would be great! Feel free to send me a link to a blog post or write me an email!
    Portland, Oregon
    1 reply
    Thu, Jun 13, 2019 10:31am -07:00
  • sentenza https://twitter.com/delphinauge   •   Jun 13
    Thanks, what are the implications of storing the tokens in the browser? Is Auth Code Flow with a backend server much more secure?
    Aaron Parecki
    yeah, having a backend is much more secure. I feel like this needs to be my next blog post.
    Portland, Oregon
    1 reply
    Thu, Jun 13, 2019 10:21am -07:00
  • sentenza https://twitter.com/delphinauge   •   Jun 13
    @oktadev @oauth_2 @aaronpk What is the current OpenId Connect recommendation for a SPA without a dedicated backend, is it Auth Code Flow + PKCE in Browser?
    #oauth #openidconnect
    Aaron Parecki
    Yep exactly, I wrote some sample code for doing that here: https://developer.okta.com/blog/2019/05/01/is-the-oauth-implicit-flow-dead
    Portland, Oregon
    3 replies
    Thu, Jun 13, 2019 9:56am -07:00
  • Jonathan LaCour https://cleverdevil.io/profile/cleverdevil   •   Jun 13
    Taxis are officially superior to ride sharing services again. They are often faster, the drivers are more professional, and they usually know where they are going.
    Aaron Parecki
    Only the taxis that have their own ride-hailing app! Once taxis started adding ride-hailing and payment via the app, then they're basically all the good parts of Lyft and none of the bad.

    I still continue to have a bad time with old-school taxis. The last trip I took the driver asked me to pay in cash but I didn't have enough, so he took $20 cash and the rest on the card, which just feels sketch.
    Portland, Oregon
    1 reply
    Thu, Jun 13, 2019 9:34am -07:00
  • Darius Kazemi https://friend.camp/@darius

    Paul Baran: also apparently doing the xkcd thing 50 years before xkcd

    Full paper: https://www.rand.org/pubs/research_memoranda/RM3638.html

    Portland, Oregon
    Wed, Jun 12, 2019 6:26pm +00:00 (liked on Thu, Jun 13, 2019 9:28am -07:00)
  • Darius Kazemi https://friend.camp/@darius

    I also just learned that store-and-forward packet switching was also referred to as "hot potato routing", which, why is it not still called that??

    https://www.rand.org/pubs/research_memoranda/RM3103.html

    Portland, Oregon
    Wed, Jun 12, 2019 6:20pm +00:00 (liked on Thu, Jun 13, 2019 9:27am -07:00)
  • Ryan Barrett https://snarfed.org/
    guess i’m done for the day

    make_an_better_internet.png

    make_an_better_internet.png
    Portland, Oregon
    Thu, Jun 13, 2019 7:10am -07:00 (liked on Thu, Jun 13, 2019 9:23am -07:00)
  • axleyjc https://twitter.com/axleyjc
    2. Another hotel franchise, even in another city, could issue a keycard to that same person. Possession of that keycard from another hotel franchise (IdP) does not allow the holder to access *any room* for that person at any hotel (relying party).
    Portland, Oregon
    Thu, Jun 13, 2019 3:27pm +00:00 (liked on Thu, Jun 13, 2019 9:21am -07:00)
  • axleyjc https://twitter.com/axleyjc
    1. Possession of the hotel keycard does *NOT* in any way prove you are the person who checked into the room it grants access to. Nobody should use the keycard to try to figure out who the person is.
    Portland, Oregon
    Thu, Jun 13, 2019 3:25pm +00:00 (liked on Thu, Jun 13, 2019 9:21am -07:00)
  • axleyjc https://twitter.com/axleyjc
    I like this analogy!

    A couple things that could make it better, especially for those who misuse/abuse OAuth for authentication:
    Portland, Oregon
    Thu, Jun 13, 2019 3:24pm +00:00 (liked on Thu, Jun 13, 2019 9:21am -07:00)
  • 11:27pm
    Asleep
    6:43am
    Awake
    7h 16m
    Slept
    14m
    Awake for
    Portland, Oregon, USA
    Thu, Jun 13, 2019 6:43am -07:00
  • Atlanta (ATL) to San Francisco (SFO)
    June 13, 2019 from 7:40am (-0400) to 9:45am (-0700)
    United Flight 1900
    San Francisco (SFO) to Portland (PDX)
    June 13, 2019 from 11:15am to 1:07pm (-0700)
    United Flight 2166
    Portland Intl in Portland
    1 mention
    permalink #okta
  • Aaron Parecki
    Contributions from: Canada, Denmark, Netherlands, Poland, United Kingdom, United States
    Thu, Jun 13, 2019 2:44am -07:00
  • Cheese Plate
    Portland, Oregon, USA
    Wed, Jun 12, 2019 7:47pm -07:00
  • Why Medium Actually Sucks (www.cdevn.com)
    Wed, Jun 12, 2019 7:00pm -07:00 #medium #indieweb #ownyourdata
  • Jonathan LaCour https://cleverdevil.io/profile/cleverdevil   •   Jun 13
    @aaronpk years ago, I wrote a little script that automatically converted a Keynote deck into individual PDF files (one per slide, vector, scalable) and then created a PPTX file out of the result. Not editable, obviously, but a nice shortcut. Sadly, I can’t find the script anymore!
    Aaron Parecki
    that's.... ridiculous and fantastic
    Portland, Oregon, USA
    Wed, Jun 12, 2019 5:46pm -07:00
  • Episode 24: What is the IndieWeb?

    A live interview on xray.fm in Portland where I talked about the IndieWeb
    continue reading...
    Thu, Jun 13, 2019 12:00am +00:00 #percolator #podcast #indieweb
older

Hi, I'm Aaron Parecki, Director of Identity Standards at Okta, and co-founder of IndieWebCamp. I maintain oauth.net, write and consult about OAuth, and participate in the OAuth Working Group at the IETF. I also help people learn about video production and livestreaming. (detailed bio)

I've been tracking my location since 2008 and I wrote 100 songs in 100 days. I've spoken at conferences around the world about owning your data, OAuth, quantified self, and explained why R is a vowel. Read more.

  • Director of Identity Standards at Okta
  • IndieWebCamp Founder
  • OAuth WG Editor
  • OpenID Board Member

  • 🎥 YouTube Tutorials and Reviews
  • 🏠 We're building a triplex!
  • ⭐️ Life Stack
  • ⚙️ Home Automation
  • All
  • Articles
  • Bookmarks
  • Notes
  • Photos
  • Replies
  • Reviews
  • Trips
  • Videos
  • Contact
© 1999-2025 by Aaron Parecki. Powered by p3k. This site supports Webmention.
Except where otherwise noted, text content on this site is licensed under a Creative Commons Attribution 3.0 License.
IndieWebCamp Microformats Webmention W3C HTML5 Creative Commons
WeChat ID
aaronpk_tv