Hacker News new | ask | show | jobs
by Pyxl101 3679 days ago
Nice! Lowering barriers to the use of technologies like these is important.

Would anyone else be interested in hosting Mozilla Persona? https://developer.mozilla.org/en-US/Persona

5 comments

Check out Let's Auth:

https://github.com/letsauth/letsauth.github.io

It's a successor to Mozilla Persona in development.

Details in the readme and on freenode #letsauth (mirrored to gitter.im/letsauth/letsauth).

Some context: we just finished proving out OpenID Connect as a reasonable protocol for websites (seriously, there's good stuff hiding in there) and are now working on rewriting the prototypes so that they're stable and worthy of trusting. Expect an announcement in the next month, along with better documentation and on-ramps for contributors.
why is it written in python? why not something that compiles and runs well on all platforms?
From the readme:

> Let's Auth 1.0 will ship as a single, statically compiled binary. Pre-1.0, we will use a variety of dynamic languages for prototyping.

nice :)
> something that compiles and runs well on all platforms

What would that be? :)

I think it's a real shame about Mozilla Persona... Anyone know why it was dropped, it was always going to be one of those things that the people/organisation running it had to be in for the long term.
I wonder what it's operational requirements are... and whether Mozilla is willing to hand persona.org et al over to a motivated group of volunteers.
We never got Persona past the point of needing an external script on websites pointing to the Persona domain. We really don't want to risk anyone getting XSS'd or assume transitive trust in whomever would follow Mozilla in custodianship of the domain, so we plan to kill the service, destroy all user data, and maintain ownership of the domain for many years.

Also, Persona was pretty explicitly designed in a way that assumed eventual, native integration into browsers. IMHO, any successor without the backing of a browser vendor would be better served by starting from scratch with a different set of assumptions. :)

What about a browser plugin? Perhaps support could be added through browser plugin, without explicit support of browser vendors. Then when adoption is significant enough, perhaps browser vendors will get on board.

(Hypothetical future in which Persona takes off. I think it's a great idea.)

I thought Persona had kind of withered on the vine no?
Thanks! I didn't know about Mozilla Persona but I think it is possible to use Hydra + Persona.