-30
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 16 Jan 2024
-30 points (29.7% liked)
Fediverse
28301 readers
97 users here now
A community to talk about the Fediverse and all it's related services using ActivityPub (Mastodon, Lemmy, KBin, etc).
If you wanted to get help with moderating your own community then head over to !moderators@lemmy.world!
Rules
- Posts must be on topic.
- Be respectful of others.
- Cite the sources used for graphs and other statistics.
- Follow the general Lemmy.world rules.
Learn more at these websites: Join The Fediverse Wiki, Fediverse.info, Wikipedia Page, The Federation Info (Stats), FediDB (Stats), Sub Rehab (Reddit Migration), Search Lemmy
founded 1 year ago
MODERATORS
I see where you come from. We are not there yet, but maybe in the future.
On the other side, having different accounts for different services is also to keep them independent from each other, even if connected
Hmmm what if there was a new fediverse service dedicated to hosting fediverse accounts. You would choose an instance of that service to create an account and then use that account to register with a fediverse instance of Lemmy, Mastodon, etc. Kind of like you can login to various websites with your Google or Facebook account.
That would mean a single account could be used with any Fediverse service (Lemmy, Mastodon, etc.), all post history could be aggregated, and you could easily move from one instance to another.
Lemmy, Mastodon, etc., would have to be enhanced to accept this mode of registration of course.
In my opinion a centralized authentication platform such as that requires a single point of failure or a level of trust between instances that isn't and in my opinion shouldn't be allowed as it would increase the attack surface for bad actors to exploit.
I think the best way would be for the community to create a docker image or other out of box solution that makes it easy for instance hosts to support multiple services on different subdomains from a single endpoint with shared authentication and as such your lemmy.example.com credentials would work for mastodon.example.com and would work for pixelfed.example.com and would work for peertube.example.com and so on and so forth.
It wouldn't be centralized. There would be multiple instances and you'd choose which one to use to host your account.
I like your idea, though. It doesn't solve the problem of moving your account from one Lemmy instance to another, for example, but it does reduce barriers to entry for other fediverse platforms.
If it’s not centralized then that’s where the trust issues come in. How can I trust another node on the network that I should authenticate User X when I don’t have the secret key?
I don't really know the details of how "log in with your Google/Facebook account" works on other sites, but I imagine it'd work the same way. I'm no expert on this stuff tho.