WeChat ID
aaronpk_tv
-
Thanks! There's currently no browser API that guarantees the use of secure-element-stored private keys. The best we get now is non-exportable. There's a mention of that here https://datatracker.ietf.org/doc/html/draft-ietf-oauth-browser-based-apps#section-6.3.4.2.2 But as discussed, even hardware-backed keys don't prevent an attacker from starting their own flow in the browser with their own keys. -
Thanks! Mostly I'm doing German so I don't completely forget everything I learned in school.
-
-
I've been looking forward to this day for a long time
-
I don't mean to brag, but
-
-
-
-
This weekend I built a prototype of using FedCM for IndieAuth! This gets rid of the need to enter your domain when logging in to websites using IndieAuth! Demo video and notes here: https://aaronparecki.com/2024/05/12/3/fedcm-for-indieauth
-
FedCM for IndieAuth
IndieWebCamp Düsseldorf took place this weekend, and I was inspired to work on a quick hack for demo day to show off a new feature I've been working on for IndieAuth.continue reading... -
-
