-30
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 16 Jan 2024
-30 points (29.7% liked)
Fediverse
28340 readers
175 users here now
A community to talk about the Fediverse and all it's related services using ActivityPub (Mastodon, Lemmy, KBin, etc).
If you wanted to get help with moderating your own community then head over to !moderators@lemmy.world!
Rules
- Posts must be on topic.
- Be respectful of others.
- Cite the sources used for graphs and other statistics.
- Follow the general Lemmy.world rules.
Learn more at these websites: Join The Fediverse Wiki, Fediverse.info, Wikipedia Page, The Federation Info (Stats), FediDB (Stats), Sub Rehab (Reddit Migration), Search Lemmy
founded 1 year ago
MODERATORS
In my opinion a centralized authentication platform such as that requires a single point of failure or a level of trust between instances that isn't and in my opinion shouldn't be allowed as it would increase the attack surface for bad actors to exploit.
I think the best way would be for the community to create a docker image or other out of box solution that makes it easy for instance hosts to support multiple services on different subdomains from a single endpoint with shared authentication and as such your lemmy.example.com credentials would work for mastodon.example.com and would work for pixelfed.example.com and would work for peertube.example.com and so on and so forth.
It wouldn't be centralized. There would be multiple instances and you'd choose which one to use to host your account.
I like your idea, though. It doesn't solve the problem of moving your account from one Lemmy instance to another, for example, but it does reduce barriers to entry for other fediverse platforms.
If it’s not centralized then that’s where the trust issues come in. How can I trust another node on the network that I should authenticate User X when I don’t have the secret key?
I don't really know the details of how "log in with your Google/Facebook account" works on other sites, but I imagine it'd work the same way. I'm no expert on this stuff tho.