6 ms·
It's the worst delegated authorisation system except for all the others that have been tried from time to time.
by RVuRnvbM2e 3mo ago
It's the worst delegated authorisation system except for all the others that have been tried from time to time.
- badgersnake 3mo agoThe original OpenID was fine.
- notpushkin 3mo agoIndieAuth is fine (but I’ve yet to see an implementation out in the wild). Tailscale’s implementation of OIDC is nice: https://tailscale.com/docs/integrations/identity/custom-oidc https://tailscale.com/docs/integrations/identity/custom-oidc But all that only makes sense if you own a domain name.
- wolrah 3mo ago> But all that only makes sense if you own a domain name. I have a hard time believing the venn diagram of "has a need for an auth provider" and "has at least one domain name" isn't just a a small circle almost entirely inside a large one, and the sliver on the outside is not for any reason other than stubborn refusal.
- notpushkin 3mo agoSorry, you’ve lost me. Which one is the small circle? My point was basically: OpenID 1 tried to let people log into websites using domain names. This is still possible to implement (and easier than OpenID, IMO), but people just don’t want to bother with domains.