4 ms·

- Can Mozilla set up a kickstarter for this project? - Is it technically possible to create a Bash/SSH integration? The Linux world pretty much has SSO now, it

by tajen 11y ago

- Can Mozilla set up a kickstarter for this project? - Is it technically possible to create a Bash/SSH integration? The Linux world pretty much has SSO now, it would be an awesome argument to have this and Persona extend each other.

slasaus 11y ago
The client that wants to login always needs to execute a browser (or at least a render and JavaScript engine). See this (stalled) proposal to make it more compatible with non-browser/simpler agents: https://groups.google.com/d/msg/mozilla.dev.identity/L2ETKkdMv8g/q3ffwFaJgl0J https://groups.google.com/d/msg/mozilla.dev.identity/L2ETKkd...
- lukeh 11y ago
  Well, we had Persona working as both as GSS-API mechanism on Unix and a SSP on Windows. You could use it to sign-in to Exchange with Outlook - that was pretty cool. Links here: * https://hacks.mozilla.org/2013/04/mozilla-persona-for-the-non-web/ https://hacks.mozilla.org/2013/04/mozilla-persona-for-the-no... * https://github.com/PADL/libbrowserid https://github.com/PADL/libbrowserid * https://tools.ietf.org/html/draft-howard-gss-browserid-07 https://tools.ietf.org/html/draft-howard-gss-browserid-07
StavrosK 11y ago
To your second question, yes, it is. Your identity provider can do whatever you want, so as long as you can make a website that shows you a "connect with your SSH now" prompt and have that turn green when you connect, then Persona can go on top of that. Persona is just a way for your email domain to say "yes I know this person". The way the site does that doesn't matter to Persona, and there was a service similar to mailinator that just let you log in with a disposable email address everywhere, with no other authentication.
zanny 11y ago
Man, Linux desktops would have a huge gain to usability if we could get a distributed accounts framework in place for all the distros so if you signin using online credentials through Persona on one desktop all your config files and preferences are carried over. Its annoying to have to manually sync my laptop and desktops config files.

by tajen 11y ago

slasaus 11y ago

The client that wants to login always needs to execute a browser (or at least a render and JavaScript engine). See this (stalled) proposal to make it more compatible with non-browser/simpler agents: https://groups.google.com/d/msg/mozilla.dev.identity/L2ETKkdMv8g/q3ffwFaJgl0J https://groups.google.com/d/msg/mozilla.dev.identity/L2ETKkd...

lukeh 11y ago
Well, we had Persona working as both as GSS-API mechanism on Unix and a SSP on Windows. You could use it to sign-in to Exchange with Outlook - that was pretty cool. Links here: * https://hacks.mozilla.org/2013/04/mozilla-persona-for-the-non-web/ https://hacks.mozilla.org/2013/04/mozilla-persona-for-the-no... * https://github.com/PADL/libbrowserid https://github.com/PADL/libbrowserid * https://tools.ietf.org/html/draft-howard-gss-browserid-07 https://tools.ietf.org/html/draft-howard-gss-browserid-07

StavrosK 11y ago

To your second question, yes, it is. Your identity provider can do whatever you want, so as long as you can make a website that shows you a "connect with your SSH now" prompt and have that turn green when you connect, then Persona can go on top of that. Persona is just a way for your email domain to say "yes I know this person". The way the site does that doesn't matter to Persona, and there was a service similar to mailinator that just let you log in with a disposable email address everywhere, with no other authentication.

zanny 11y ago

Man, Linux desktops would have a huge gain to usability if we could get a distributed accounts framework in place for all the distros so if you signin using online credentials through Persona on one desktop all your config files and preferences are carried over. Its annoying to have to manually sync my laptop and desktops config files.