this post was submitted on 29 Sep 2021
16 points (100.0% liked)

Fediverse

18153 readers
14 users here now

A community dedicated to fediverse news and discussion.

Fediverse is a portmanteau of "federation" and "universe".

Getting started on Fediverse;

founded 5 years ago
MODERATORS
[email protected]
[email protected]
16
Decentralized Single Sign-on (lemmy.ml)
submitted 3 years ago by [email protected] to c/[email protected]
5 comments fedilink hide all child comments
 

The decentralization of Single Sign-on seems like a natural step in improving usability and accessability of the fediverse. It will require a lot less account and make it far easier to interact with content. Are there anybody working on this?

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 4 points 3 years ago (1 children)

Isn't this exactly what OpenID Connect is/was all about? Afaik this is still the protocol behind the "log in with facebook/google/github" options you find on many websites, but it can be a fully decentralised authentication scheme if they'd only let users type in their own identity url.

[–] [email protected] 1 points 3 years ago* (last edited 3 years ago) (1 children)

IMHO while often called federated authentification, OIDC is more delegated authentication especially when a few central services are used.

The older OpenID standard let people put their own url, but it never got much traction and is pretty much abandoned by now.

Actual federated authentication like Hubzilla's Magicauth or Webauthn is seamless. You just open a link and the website will recognize you as a remote user and let you do stuff based on your permission level.

[–] [email protected] 1 points 3 years ago

I don't disagree with that, but there's nothing preventing anybody from setting up their own OIDC service, and for sites to accept any OIDC provider rather than just a couple of giant ones.

And yeah, the Hubzilla Magicauth is really nice! Not sure how easy it is to apply it to other uses than Hubzilla/zot though. Could be worth exploring.