Post B6VQaxB5832psLAvL6 by xgranade@wandering.shop
 (DIR) More posts by xgranade@wandering.shop
 (DIR) Post #B6VQaxB5832psLAvL6 by xgranade@wandering.shop
       0 likes, 0 repeats
       
       The slickest auth system I've ever seen is probably that used by the Gemini protocol (not the Google product): my client has a list of keys, each associated with one or more domains, and sites can ask for a key. I can create more keys client-side whenever I want, delete and transfer keys, and so forth.All traffic uses TLS with self-signed certs, using trust on first use.Like, it's too simple for what the modern web needs, but the UX is consistently better than either passwords or passkeys.
       
 (DIR) Post #B6VQaxRO9Q5Ygunwky by cthos@mastodon.cthos.dev
       0 likes, 0 repeats
       
       @xgranade .... I mean a lot of the current problems with passkey ux stems from the premise that the average person shouldn't need to think about how a website knows who they are. (This is a hot take)
       
 (DIR) Post #B6VQaxbfXCJPCnc9mS by xgranade@wandering.shop
       0 likes, 1 repeats
       
       @cthos Yeah, it's a good hot take. I categorically disagree with that premise, I don't think taking awareness away from users empowers them to make good decisions, and the civic importance of making decisions about tech could hardly be more critical.
       
 (DIR) Post #B6VQb1cWbxNDec2tfc by xgranade@wandering.shop
       0 likes, 0 repeats
       
       My hot take is not that anything other than Gemini should use that model, it's that that model makes for a good baseline as to what the UX for anything better. Like, download Lagrange, and go to gemini://bbs.geminispace.org/, and set up a new account. All the keys just go to ~/.config/lagrange/idents, and can be synced using whatever.https://git.skyjake.fi/gemini/lagrange/releases
       
 (DIR) Post #B6VQb36h5H6GGTAVKi by xgranade@wandering.shop
       0 likes, 0 repeats
       
       It's a nice exercise, I think, in terms of what browser-managed auth and identity (yes, those are separate things, I get that) can look like.It's not practical, as I said, but it is an interesting point of reference.
       
 (DIR) Post #B6VQb4VXsMZabpnrhw by xgranade@wandering.shop
       0 likes, 0 repeats
       
       (Obligatory: some of the specific menu item text is probably not as easy to understand as it should be, like I don't want to have to explain what an "SHA fingerprint" is to folks. But it's the shape of the process that I find instructive.)