Conversation

Notices

1. Embed this notice
   dansup (dansup@mastodon.social)'s status on Sunday, 23-Jul-2023 18:26:04 JST dansup

   Alright, so I had an idea to improve onboarding further by creating a "Pixelfed Passport" service.

   Basically, users would be able to link Pixelfed accounts to a central passport.pixelfed.net account, and use that one account to easily log in to others.

   This is primarily geared towards new fediverse users who can't remember their server, allowing them to use a single email/password to access their accounts easily.

   Will be opt-in, open source, and auditable. Thoughts? #feedbackWanted

   • Embed this notice
     dansup (dansup@mastodon.social)'s status on Sunday, 23-Jul-2023 18:41:48 JST dansup

     in reply to

     • pieceofthepie :coffefied:

     @pieceofthepie It would be a supplementary service, users could still login the "manual" way by selecting the instance first.

     That way if this goes down, users still can login.

   • Embed this notice
     pieceofthepie :coffefied: (pieceofthepie@social.n8e.dev)'s status on Sunday, 23-Jul-2023 18:41:50 JST pieceofthepie :coffefied:

     in reply to

     @dansup Wouldn't that then be a single point of failure?

     Unless, I guess, you're using something like SOLID data pods.

   • Embed this notice
     Callionica (callionica@mastodon.social)'s status on Sunday, 23-Jul-2023 20:25:51 JST Callionica

     @dansup Hope that makes sense to you. TLDR: use the browser’s secure password store to save the real server name so that the user can make their own choices about how or whether they backup that data off device. Don’t get into the business of storing credentials for other services/servers. You don’t even need a real server for this technique.

   • Embed this notice
     dansup (dansup@mastodon.social)'s status on Sunday, 23-Jul-2023 20:25:51 JST dansup

     in reply to

     • Callionica

     @callionica Good point, and no we're not storing credentials, just associating email addresses with instance domains, the user will still need to enter their password on the instance they use.

   • Embed this notice
     dansup (dansup@mastodon.social)'s status on Sunday, 23-Jul-2023 20:57:07 JST dansup

     in reply to

     • maegul

     @maegul I think so!

   • Embed this notice
     maegul (maegul@hachyderm.io)'s status on Sunday, 23-Jul-2023 20:57:08 JST maegul

     in reply to

     @dansup more of a follow up question…

     Are such semi-centralising hubs inevitable as tools for smoothing over the UX issues of decentralisation?

     I’m personally betting yes.