Aaron Parecki

https://www.ietf.org/mail-archive/web/oauth/current/msg18468.html

OAUTH-WG

Thanks Hannes,

Since I wasn't able to give an intro during the meeting today, I'd like to share a little more context about this here as well.

At the Internet Identity Workshop in Mountain View last week, I led a session to collect feedback on recommendations for OAuth for browser based apps. During the session, we came up with a list of several points based on the collective experience of the attendees. I then tried to address all those points in this draft.

The goal of this is not to specify any new behavior, but rather to limit the possibilities that the existing OAuth specs provide, to ensure a secure implementation in browser based apps.

Thanks in advance for your review and feedback!

Portland, Oregon • 47°F

Tue, Nov 6, 2018 11:13am +01:00 #oauth
https://indieweb.org/events/2018-10-31-homebrew-website-club

Photo from HWC Berlin!

Berlin, Berlin, DEU • 54°F

1 like

Fri, Nov 2, 2018 12:23pm +01:00
niklasjordan https://micro.blog/niklasjordan • Nov 1
@aaronpk damn... I'm only in Berlin from Monday. Accessibility Club and BT conf. Are you attending one of this conferences?

Yeah I'll be at Accessibility Club!

Berlin, Berlin • 48°F

Fri, Nov 2, 2018 1:02am +01:00
dietrich https://mastodon.social/@dietrich • Oct 31
Prague sausage party. http://bit.ly/2yJxlHz

TIL my last name means sausages in Slovak

Berlin, Berlin

1 like 1 repost 1 mention

Thu, Nov 1, 2018 7:16am +01:00 #til
devilgate https://micro.blog/devilgate • Oct 31
@aaronpk Good points. I think I was thinking in terms of, my users’ accounts are “my data” in some sense, so I should own it. But as you say, outsourcing is fine.

Yep outsourcing is fine as long as you have a way to migrate to another provider! If we didn't hold that principle, it's a slippery slope to start saying everyone should host their site from a server in their house, and from there to having to build their own hardware. Gotta draw a line somewhere, and ours is identity and data portability.

Berlin, Berlin • 47°F

Wed, Oct 31, 2018 10:20pm +01:00
devilgate https://micro.blog/devilgate • Oct 30
@aaronpk Sounds interesting. But doesn’t it mean that our account details will be stored on the Okta site, and not our own sites? Doesn’t that conflict with Indieweb principles, and also put Okta in a complex position regarding GDPR and other regulations?

Or am I completely misunderstanding?

Yes, that's the idea in fact. Re: GDPR, there's plenty about that you can read here https://www.okta.com/gdpr/

But on the IndieWeb front, it's totally fine to outsource various parts of your website, as long as you own your online identity. That's why using a web host like micro.blog is still in line with IndieWeb principles as long as you point your domain to it.

Using Okta to handle logging in to your own site is just outsourcing the internal user account management. There are some things I would rather have an expert do well for me rather than doing a poor job of it myself.

Berlin, Berlin • 53°F

1 reply

Wed, Oct 31, 2018 4:44pm +01:00
Matthew McVickar https://mastodon.social/@matthewmcvickar • Oct 30
I am very excited about Donut.js tonight because not only is it Donut.js, but it’s HALLOWEEN and I have lots of decorations and I love candy.

halloweeneen anyway. Sorry to miss it!

Seattle, Washington • 57°F

1 like

Tue, Oct 30, 2018 4:11pm -07:00
Philip Saa https://twitter.com/cowglow • Oct 30
You coming to Germany for the IWC in Berlin??

I sure am! Heading to the airport right now in fact!

Portland, Oregon • 48°F

1 like 1 reply

Tue, Oct 30, 2018 10:06am -07:00
Melissa Santos https://weirder.earth/@ansate • Oct 30
First day of new job, new routine. I'm starting as I mean to go - work from home. My big non-work goal is to leave the house today for at least a walk around the block.

two birds with one stone: take conference calls outside on a walk!

Portland, Oregon • 47°F

Tue, Oct 30, 2018 8:27am -07:00
Oct 29
Is there any decent non-smart TV out there anymore? I’m suddenly in the market for something to replace my Samsung plasma screen.

No, unless you look at a different market. Search for "commercial display". That's what I've got right now and it's so much better than the smart TV crap.

Portland, Oregon • 49°F

Mon, Oct 29, 2018 8:40pm -07:00
Lillian Karabaic https://twitter.com/anomalily • Oct 30
.@aaronpk just willingly indulged filming me in a scene that required carrying an overstuffed chair outside along with a robe, @hatp merch tshirt, and taking off my shoes in the middle of the wet sidewalk during rush hour. Onlookers were confused.

Portland, Oregon, USA • 52°F

1 like 1 mention

Mon, Oct 29, 2018 6:40pm -07:00
Peter Majmesku https://twitter.com/netzor • Oct 29
Thanks. The sharing functionality in addition to RSS features, sounds promising to me. Is there any curated list with websites, that are offering IndieWeb support? I would like to see how others are using IndieWeb in action.

I haven't seen exactly a curated list, but here are some links:

posts from IndieWeb people https://stream.indieweb.org

posts about the IndieWeb https://news.indieweb.org/en

a bunch of peoples' websites https://indieweb.org/chat-names

Portland, Oregon • 48°F

1 like 1 reply

Mon, Oct 29, 2018 7:13am -07:00
Peter Majmesku https://twitter.com/netzor • Oct 28
What's the benefit in comparison with the good old RSS feeds? There are already tons of readers out there.

I wrote a bunch about exactly that here: https://aaronparecki.com/2018/04/20/46/indieweb-reader-my-new-home-on-the-internet

Portland, Oregon • 52°F

1 like 1 repost 2 replies

Sun, Oct 28, 2018 2:25pm -07:00
Torsten Lodderstedt https://twitter.com/tlodderstedt • Oct 24
I like the idea of simplifying the frontend flow while establishing a way to configure the properties of the upcomming transaction in the (protected) back channel. Looking forward to discuss at #iiw

I'd be up for a discussion about minimizing the use of the front-channel in a session today! Will one of you propose the session or should I? #iiw

Mountain View, California • 51°F

3 likes

Wed, Oct 24, 2018 7:13am -07:00 #iiw
Orie Steele https://twitter.com/OR13b • Oct 23
#IIW IIWXXVII, Internet Identity Workshop, Session I, Room A: Centralized and Decentralized Identity Standards: OAuth + DID w/ Code.

Slides: https://docs.google.com/presentation/d/1xsiQ6ndb33kzhF8kl1cF_EpWxWmNFwhd0o3KExe6eSw

Got another one for your slides!

➡ https://indieauth.net
➡ https://www.w3.org/TR/indieauth/

I'll be doing a demo at demo hour tomorrow at #IIW if you'd like to learn more!

Read more: https://aaronparecki.com/2018/07/07/7/oauth-for-the-open-web

Mountain View, California • 68°F

3 likes 2 reposts

Tue, Oct 23, 2018 12:41pm -07:00 #iiw
Beyond Bridges https://twitter.com/jgphilpin • Oct 23
Need to keep my eyes open for you where in the circle are you? #IIW

Kinda in the back, I'm wearing pink pants, should be easy to spot!

Mountain View, California • 60°F

1 like 1 reply

Tue, Oct 23, 2018 10:59am -07:00
Jonathan LaCour https://cleverdevil.io/profile/cleverdevil • Oct 21
Signed up for gigabit internet service, finally. Installation by end of month! A bit disappointing that the upstream is only 35 Mbps, but honestly, gigabit downstream makes me feel like I'm living in the gosh-darned future.

"Only" 35mbps! You could run your website off of that no problem! In fact I bet you'll have trouble finding anything that can accept data at that rate anyway. When I had 900mbps down and 700mbps up i couldn't use it all anyway!

Nürnberg, Bayern • 41°F

1 reply

Mon, Oct 22, 2018 12:55am +02:00
https://jkphl.is/events/indiewebcamp-berlin-2018/

I'm excited for Berlin!

Nürnberg, Bayern, DEU • 58°F

Sun, Oct 21, 2018 4:09pm +02:00
donpdonp https://mastodon.xyz/@donpdonp • Oct 19
is there a mastodon/activitypub discovery/search site? the tag explorer site i know of is down. https://mastodon-tags-explorer.hcxp.co/tags
seems like there is an opportunity for someone to build something interesting in that space.

We had a session on exactly that during IndieWebCamp Nürnberg today! https://indieweb.org/2018/Nuremberg/search

Nürnberg, Bayern • 46°F

1 like

Sat, Oct 20, 2018 10:58pm +02:00
Björn Stierand https://twitter.com/egoexpress • Oct 20
Arrived at @indiewebcamp Nuremberg 2018. Currently listening to @aaronpk talking about Micropub. He's just hacking together a blogging engine alongside his talk. Amazing! #indieweb

Glad you're enjoying it!

Nürnberg, Bayern • 62°F

2 likes

Sat, Oct 20, 2018 5:09pm +02:00

older