Hacker News new | ask | show | jobs
by fuzzybeard 3293 days ago
What's the alternative? To authenticate against our FB account? I'd much rather have a distributed system than to be forced to maintain a FB account just to login.
2 comments

Persona seemed like a pretty good system, until it was shut down. I don't like single-sign-on systems in general, but having it managed by the Mozilla foundation seemed a lot safer than relying on Google/Facebook. I think their original long term plan was to transition users away from their single-sign-on service as browser support for the features they needed got better.

The only thing that bothered me about the general design is that it used email addresses as identification tokens, and for the site I was making I didn't even want that much personal information from my users.

How about indieauth[0]?

Indieauth lets you authenticate to websites based on your control of a website you specify (via rel=me links).

[0]: https://indieauth.com/

I haven't fully read your link yet, but wasn't that the point of the original opened spec too?
Yes? But indieauth does not require you to personally run an auth server, which makes it easier to adopt. Basically it will search through different online identities that you list on your home page and letting you choose any of their OAuth services.
Neither did OpenID, you would just list your auth server in a special meta tag. IndieAuth even seems to support acting as your OpenID server, see https://indieauth.com/openid .