Back in June I wrote about an exciting confluence of digital auth tech: ### Social sign-in for indies The focal point of Weird Net...
Back in June I wrote about an exciting confluence of digital auth tech:
(1) The commodification of #OIDC infrastructure, (2) the emergence of #FedCM, (3) and the compatibility of both with #indieauth .
In short, it is now easier than ever to log into web applications using your own website as an identity provider. Or at least, it would be, if your favorite web apps supported these agency-enhancing technologies.
I'm not going to pretend I grasp the technological details of either Weird or the Leaf protocol, but the basic concept of superpowering the personal website as identity provider is very attractive — and the passion of your writing is infectious 🙂 I hope to someday reach a lightbulb moment with your work and just implement it on my own site.
Are the people who invented this aware of NOSTR?
If so, what makes this different? And if not, perhaps we could use NOSTR to bridge the gap in the fediverse at the moment between NOSTR users and Mastodon/Pixelfed/Lemmy/KBIN/MBIN users
I started forking Lemmy for an inventory system but then realized that NOSTR was far more suited to that and other applications that require security and encryption.
Perhaps. I tend to listen to Snowden when it comes to tech. But I haven’t used it yet because all of the implementations I could use involved a bitcoin wallet. I’m a fan of crypto but that felt weird.
Someone else reassured me that NOSTR is a very open platform and that requirement wasn’t true.
From my research, I have found it to be far more decentralized than Lemmy’s (and the pub/sub) federated model, which would also, obviously have the same drawbacks that we see in other truly decentralized tech like crypto, torrents, and tor where you are on your own in the world, forced to literally keep the ocean of shit from infecting you! 😉
So, I think of those things as necessary evils. For example, if I used NOSTR, I could have an address that follows me no matter what. That cryptographic hash is my NOSTR identity for better or worse. That’s pretty powerful and far more secure than a two step verification process in the long run.
I don’t know enough about it yet. But I’d say it is a raw technology that I wouldn’t allow the criminals and trolls of the world define for me.
sign in to websites using your personal web address, without having to use your e-mail address.
What is the point of that? For convenience, email addresses are much easier to come by than is web hosting. For being securely anonymous it's also much easier to do through email — but not by so much that requiring a website rules it out, if that's the intention.