@JensHannemann Even a server that provides both services would have them under different subdomains, so that wouldnt change anything.;

@freemo @JensHannemann People want something like SSO which should be possible if fedi apps supported oidc or webauth.

You can add them manually but that's not good integration.

@colinsmatt11 Its great integration to use two standards, IF it becomes a fediverse standard to use them together :)

Extend the eisting standard rather than roll your own.

@freemo There are issues with both as you could have guessed. But I won't go into that discussion because I'm not good with authentication stuff.

But OIDC would be the easiest to implement because almost all fedi apps have OAuth2 which is base of OIDC.

@colinsmatt11 @freemo I don't mind not having SSO, I do use a password manager and I will get a #YubiKey eventually, but it's more about managing identity, i.e. that all these accounts represent the same actual person. Sort of like a verified UUID that can be used to establish that link.

@JensHannemann @freemo At the moment there isn't something like that but we might achieve something similar to it.

I suggest checking out FEP 8b32 (https://socialhub.activitypub.rocks/t/fep-8b32-object-integrity-proofs/2725) by @silverpill

He can explain it better than me, obviously.

@colinsmatt11

What I am suggesting is you make a w3c standard as you design it

@JensHannemann @silverpill

@freemo @colinsmatt11 @JensHannemann Fediverse Enhancement Proposals is our alternative to W3C standardization process.
The difference is that with FEPs we don't have to agree on a single spec. Some proposals get adopted by developers, others don't. There's no central authority that decides what people should do.

@colinsmatt11 @freemo @JensHannemann Thanks! I think FEP-c390: Identity Proofs is more relevant to this discussion, because with it we can add a decentralized identity layer to the Fediverse. If two actors have identity proofs signed by the same key, this means these actors are controlled by the same person.

FEP-8b32 is concerned with signing activities/objects, it's an alternative to HTTP signatures.

Whoa where did this FEP thing come from? Beats the hell out of the w3c

@ademan @silverpill @JensHannemann @freemo SocialHub because they want to make fedi better like many users and developers wished.

@colinsmatt11 @freemo @JensHannemann @ademan I think it all started with W3C Social Web working group, but now SocialHub and FEP process seem to exist independently from W3C