WeChat ID
aaronpk_tv
-
I signed up for FedEx and UPS delivery notifications to my address or whatever they call them, and now it's just a guess as to what will show up when I get a notification that something from "IMCLS" is arriving next week -
Assigning colors to Gmail labels really makes my inbox look a lot more fun. I don't know why I didn't do this ages ago.
-
#OAuth expert @aaronparecki examines a few recent high-profile #WebSecurity breaches and discusses how they relate to OAuth. You can Watch the full video with sub-titles and transcript by signing up for a FREE #Wurreka account: https://wurreka.com/watch/hacking-oauth
-
Simon Willison
https://twitter.com/simonw
•
Nov 19
This seems to contradict the spec - https://github.com/simonw/datasette-indieauth/issues/21#issuecomment-730485391
That's for the final profile URL. The user can enter something different at the start, and if that contains a username component then the trick works. -
Blaine Cook
https://twitter.com/blaine
•
Nov 19
I don't agree that it's completely glossed over - there is a registration protocol, it's just not widely implemented. The intent could be better stated, for sure, but I think IA's emphasis is too far the other way. My ideal is something in-between IndieAuth and OIDC, I think! 😊
take a look at my activitypub conference talk, starting at 11:50, I address the UX aspect of it here: https://aaronparecki.com/2020/09/22/25/activitypub-oauth-2-1#t=710
also happy to set up a time to chat about this instead! I think we have a lot of similar goals! -
Blaine Cook
https://twitter.com/blaine
•
Nov 19
My goal is to enable secure, simple federated identity. Authentication is a core bit of functionality in that regard. Obviously supporting non-corporate identities is critical, but forcing everyone to be 'indie' is a mistake, I think.
nobody said "force". my goal is to *enable* indie identities, something that is pretty much completely glossed over by the current OIDC ecosystem.
-
Mugwump
https://twitter.com/ozaed
•
Nov 19
I use DNSSEC since 6+ years, while I have seen many auth protocols come and go. And 'IndieAuth' I first heard today.
ah yes, the "this is the first I've heard about it" argument sure is a solid one
