brokenwren

7 ms·

1.
by brokenwren 3y ago
An overview of how FusionAuth selected our SOC 2 software vendor for 2023.
2.
How FusionAuth is affected by SVB(fusionauth.io)
2 points by brokenwren 4y ago|1 comments
3.
by brokenwren 4y ago
I missed that you left Okta back in 2022, so pardon asking for a disclosure. In any case, I think your last sentence was the part that seemed a bit defensive. Dan was pretty clear that his assessment had overlap and things get fuzzy. Of cou
4.
by brokenwren 4y ago
Generally, the HN community prefers if you announce the company you are with. It helps ensure transparency in the communications. I’m the founder of FusionAuth and have deep knowledge on OAuth and SAML. The groupings Dan used seem like a de
5.
by brokenwren 4y ago
I think that's actually what most people are waiting for with Loom. They want it to be fully baked into the JDK and ready for production first. Then they will start using it. For java-http, once it has been tested a bit more, we'l
6.
by brokenwren 4y ago
I'm not clear why there is a distinction here. Any HTTP server can easily use a non-blocking Selector to handle the I/O operations and then perform the application logic on Threads or Fibers. My point is that Loom fundamentally is
7.
by brokenwren 4y ago
I don't think this is accurate. The Loom documentation says specifically that it is a concurrency model to replace native threads with fibers. It says very little about non-blocking IO, except that it is a use-case that it assists with
8.
by brokenwren 4y ago
Sounds good. Once I get the project published, it will include all of the load tests for each server as well as the setup and code for it all. Might be a couple of weeks or so, but it will be a separate GH project. Something like java-http-
9.
by brokenwren 4y ago
Actually, Loom is about threading and helps support NIO. You'll still need Selectors, Channels, and ByteBuffers with Loom, you'll just be able to pass off the parsing and handling to a Fiber. You might be able to get away with doi
10.
by brokenwren 4y ago
Thanks! Feel free to log any issues you encounter. TLS is complex, but I think I have it working properly now.
11.
by brokenwren 4y ago
I thought so as well. See my comment on the other thread about Netty. I'm sure someone that is a Netty expert or committer could figure it out, but it's so complex that it makes it nearly untenable.
12.
by brokenwren 4y ago
I ran the load tests and couldn't explain it either. I adjusted the thread pools, buffer sizes and a bunch of other parameters and couldn't get Netty to scale. I think Netty tries too hard to be everything to everyone. This makes
13.
by brokenwren 4y ago
I wrote most of the server code for the project and I actually looked extensively at Loom. We decided to anchor the project to LTS Java versions only. The issue with Loom is that as a preview release, you can't use it without introduci
14.
by brokenwren 4y ago
As this applies to access tokens, if your application doesn't need a JWT, it shouldn't care whether the authorization server returns a JWT or an opaque token. On the flip side, if your app needs a JWT, then the authorization serve
15.
by brokenwren 5y ago
I agree with you, but it should be WAY faster than every 90 days. I'm trying to find articles that address the fact that NIST and others are worthless since they recommend every 1-2 years.
16.
by brokenwren 5y ago
So, do you know of anyone that has written this type of thing up? I'd love to have some fodder when having these types of discussions. :)
17.
by brokenwren 5y ago
I completely agree. But even at 15 or 30 days, it's too long. The only way to protect a key would be to rotate it every day or every hour.
18.
Ask HN: Articles about key rotation being worthless
2 points by brokenwren 5y ago|7 comments
19.
by brokenwren 5y ago
We tried to convince Twitch for years that their filters were garbage and they should use CleanSpeak. They kept insisting their engineering team had written the best filter in the world. Sometimes it’s just not worth the effort to try and h
20.
by brokenwren 6y ago
FusionAuth also has advanced registration forms and we are working on a lot of really awesome improvements around sign-in and sign-up workflows. Stay tuned for some major updates in the coming weeks! ;)
21.
by brokenwren 6y ago
We are working on that. Our new website will include a ton of information about the company, our executive team, and our culture. Stay tuned! You can check out my LI profile for now though ;) https://www.linkedin.com/in&#x2F
22.
by brokenwren 6y ago
You can export everything via a support ticket. We have migration scripts you can use if you come over to FusionAuth or tweak them for any other platforms as well: https://github.com/FusionAuth/fusionauth-import-scripts
23.
by brokenwren 6y ago
Except for all the basics like RBAC with multiple roles, JWT modification, simple MFA, etc.
24.
by brokenwren 6y ago
Come on over to the FusionAuth! The water is great! - https://fusionauth.io
25.
by brokenwren 6y ago
It has all of the same features as the Cloud version, including unlimited Enterprise Connections (SAML and OIDC) for free. The only features that required a paid-Edition are: Connectors (connecting to LDAP and other backends), Advanced Regi
26.
by brokenwren 6y ago
Exactly. And most businesses "outsource" their database. They might use PostgreSQL for free or they might pay Microsoft for SQL Server. In my opinion, this is analogous to auth.
27.
by brokenwren 6y ago
Are you on their startup plan that allows you unlimited "Enterprise Connections"? I'd be very careful with how their pricing impacts your business as you increase your B2B clients with Enterprise Connections. I'm honestl
28.
by brokenwren 6y ago
(I should disclose upfront that I'm the founder of FusionAuth) The core of FusionAuth isn't open source, but a good portion of the code built around the core is open source. It is free and has a large, growing community and integr
29.
by brokenwren 6y ago
Then you should also group the database in your core competencies and would likely need to consider building this yourself. Or the OS. Or the web framework. Or the wire protocols. Sure, this is hyperbolic, but it does illustrate that not ev
30.
by brokenwren 6y ago
It's always great to see new companies trying to improve on this problem. I'm the CEO of FusionAuth and we've been working on our product for 6 years now. I can attest to the complexity and challenges that exist in this indus

More ›