Iām much better at products than protocols. I'm so thankful that people like @aaronpk (& several others) designed #indieauth and #micropub.
WeChat ID
aaronpk_tv
#indieauth
-
@franatique It supports SMS, email (via Persona), and now GPG auth: https://indieauth.com/gpg -
Google Two Factor Authentication, possible attacks and prevention (zerocool.is-a-geek.net)
To prevent this kind of attack we need to: limit the number of login attempts, ban IPs that send a large number of login requests
-
@danlyke Hey! Noticed you have a PGP key on your home page! Check out the setup instructions for using that with IndieAuth: https://indieauth.com/gpg
-
@hecavanagh You should read the follow-up here: http://indiewebcamp.com/On_Evolving_IndieAuth_Followup as well as how the community is approaching gaining "wider adoption" http://indiewebcamp.com/generations
-
Christie Koehler
https://twitter.com/christi3k
•
Jul 2
I'm making a list of OpenID providers. Do you have favorites? (non-Google, please)
@christi3k Yep! indieauth.com can be used as an OpenID provider! Check out http://indiewebcamp.com/IndieAuth#Use_IndieAuth_for_your_OpenID -
@citizencontact Hop in the #indiewebcamp IRC channel and I'd be happy to chat! http://indiewebcamp.com/IRC
-
Just pushed out two fixes for IndieAuth.com:
• Better feedback on SSL errors - https://github.com/aaronpk/IndieAuth/issues/40
• Allow http -> https redirects - https://github.com/aaronpk/IndieAuth/issues/28 -
@mapkyca You should take a look at the latest work I've been doing with #IndieAuth which is essentially a way to turn your website into an OAuth provider. Removes the need for any third party to be involved. Still a bit rough documentation, but check out these links:
https://quill.p3k.io/docs
http://indiewebcamp.com/login-brainstorming
http://indiewebcamp.com/Category:IndieAuth -
Casey Link
https://twitter.com/Ramblurr
•
May 28
@aaronpk Trying to use openid w/ IndieAuth, but its hanging when scanning for rel="me" links (on http://binaryelysium.com) Any idea what's up?
@Ramblurr That's really strange... I see what you mean. Maybe the OpenID consumer is assuming your site is available over https? Connecting to your site on https hangs for me, so maybe that's what it's doing too. -
Thinking about two-factor auth at a nano level, requiring human confirmation before any client can actually post to your site via your micropub endpoint.
For example, I sign in to barnaby's experimental Taproot interface but don't trust it entirely yet. Instead of giving him blanket access to post to my site, every time his app makes a request to my micropub endpoint, it goes and asks me for confiramtion before publishing.
Either OOB confirmation (2-factor auth via SMS or something) or an OAuth-like confirmation dialog from the same browser window.
#indieauth #micropub #2fa -
@yatil @adactio @t You can use IndieAuth.com as your OpenID delegate to sign in to the few remaining sites that still consume OpenID. The OpenID community has moved on to OpenID Connect which is more similar to OAuth 2.0 #decentcamp
-
Just launched keyboard shortcuts on IndieAuth.com so you can select a provider with j/k and press enter to sign in. No mouse necessary anymore!
-
-
Wrote and launched a reference #IndieAuth token endpoint tonight, looking forward to documenting it this weekend so others can use it! #indieweb
-
@davidmead We added Open ID delegation to #indieauth when they announced MyOpenID would be shut down. Guide: http://aaronparecki.com/articles/2013/09/15/1/indieauth-now-supports-openid-delegation
