Notices by ☆ Dmitri ☭ (yogthos@mastodon.social), page 5

🤔

@msh @Gargron same idea, but different context. WebAuthN deals with authenticating using a public key. The idea I'm proposing is for tracking user identity between different servers in the federation.

🐱

@Gargron if the info can be decrypted, that confirms your identity, and you can post as the user from your home server on the new server.

If the info is pulled on each log in, then it makes it easy to revoke keys as well. If you think your info was compromised, just regenerate the key pair.

And public key is not really public in this scenario in a sense that you'd share it publicly. It's just used for remote auth by your new account.

@Gargron on a random note this reminded me of an idea I had.

I was thinking of how you could create a portable federated profile, and it could work similarly to SSH keys.

You could generate a key pair on the home server, and use the private key to encrypt your profile info.

Then when you create an account on another server, paste your public key, and it will try to pull profile info from your home server and try to decrypt it using the key your provided.

Intended to be open, free, and decentralized, it's now dominated by a handful of companies that control what we see and what we can say.
https://www.strategic-culture.org/news/2019/03/11/death-of-internet.html

Godot 3.1 is out, improving usability and features https://godotengine.org/article/godot-3-1-released

Spitzer telescope captures the bow shock created by the stellar winds from Zeta Ophiuchi.