Conversation

Notices

1. Embed this notice
   iced depresso (icedquinn@blob.cat)'s status on Wednesday, 14-Oct-2026 02:11:06 JST iced depresso

   • anna
   @navi i vaguely remember peeping the FIDO2 spec and its obnoxiously huge (as are the corpses behind it like GSSAPI.)
   
   i'm not entirely convinced why things like SQRL, TOTP and PAKE can't be tried first over these sprawling gigaspecs, but other than that idk much of anything about it.
   • Embed this notice
     iced depresso (icedquinn@blob.cat)'s status on Wednesday, 14-Oct-2026 02:24:14 JST iced depresso

     in reply to

     • anna
     • ロミンちゃん
     @romin @navi i really honestly preferred SASL :/
     
     "hello i'm blobcat i would like to use methods in this order"
     "hello i am server we will be using fingers crossed behind your back authentication from this set"
     
     this whole rigamarole really doesn't need to be much more than described; here's a challenge code and nsig reply, good day.
   • Embed this notice
     ロミンちゃん (romin@shitposter.world)'s status on Wednesday, 14-Oct-2026 02:24:15 JST ロミンちゃん

     in reply to

     • anna
     @icedquinn @navi fido1 was fairly simple, it's the fate of anything designed "by committee"