Why would I trust a random Lemmy server admin with authentication for anything other than Lemmy?
this post was submitted on 18 Oct 2023
37 points (95.1% liked)
Fediverse
17683 readers
18 users here now
A community dedicated to fediverse news and discussion.
Fediverse is a portmanteau of "federation" and "universe".
Getting started on Fediverse;
- What is the fediverse?
- Fediverse Platforms
- How to run your own community
founded 4 years ago
MODERATORS
You can use federated SSO. The remote site never sees your credentials but only a token that you’ve been authenticated against your home instance.
That being said, that’s probably the problem, in order to do federation a small degree of trust is required between the two instances. I guess that is already done with activityPub since you’re getting content from remote instances.
a token that you’ve been authenticated against your home instance.
I assume you are talking about OpenId Connect (or OAuth 2.0 but that is basically what OpenId Connect is based on) here. The crucial bit that didn't really work out with this is the part where users just specify their OpenId Connect provider at login time. All uses I have seen in at least 10 years have a fixed list of providers to choose from because of these trust issues.
Federated ID seems interesting but impractical. Take your home instance ID and use it to auth to another server, nice to have if the home base is down but if the home is down then how does the remote host validate the user in a realtime sense? Storing tokens or creating a local version of the account would be possible but if the user was banned from the home base then you have to trust replication to clear it from the remotes or have a short enough token expiration to know they need to revalidate against the home base after X time.
A ways out of my expertise, I work more on the lower layers of connectivity so maybe I'm overthinking it. What could be helpful would some sort of local app setup that would create an instance with an easy executable. Creating spontaneous servers has playing with fire potential and doesn't address domain creation or port allocations, but with the certbot/acme systems out there it seems like it wouldn't be too far out of the realm of reality. Musings of a mad scientist...
Typo in title. It should be: "solve the problem"
The pixelfed dev even wrote his own chat system instead of integrating matrix or xmpp
Titles are editable on lemmy
Appearantly not on thunder
Hmmm… this is why I have like 15 lemmy apps on my phone. Every app is a random selection of features, and no app seems to do everything
I did that as well. Last week I uninstalled infinity after thunder solved the profile loading lag. Appearantly it was too soon.
Is Sync not good for you? I stopped app-hopping after Sync came out.
Unfortunately, at the moment, I’m running an iPhone. Have been for a few generations after my pixel 2 started giving me unfixable GPS issues while I was trying to do Uber/delivery work.
Thunder can't edit posts at all yet.
We have XMPP accounts integrated with our Lemmy instance already. Lemmy doesn't make that easy out of the box, but you can just hook up an XMPP server directly to the Lemmy database.
Post titles can be edited after posting, at least on Lemmy
Integrating something like Matrix is not an easy feat, there is a lot of heavy lifting being done in the background to make things easier for us users, like key generation, message signing, verifying logins etc. that another dev may not have the time or resources to implement. Lemmy partially solves this with a dedicated message button if you have a Matrix account linked
Damn that behavior is new and a good step :)
[This comment has been deleted by an automated system]