4 ms·
A lot of people in this thread seem to be unaware of the purpose of /.well-known/ . You can read the memo about it here: https://tools.ietf.org/html/rfc5785 h
by greycol 8y ago
A lot of people in this thread seem to be unaware of the purpose of /.well-known/ .
You can read the memo about it here:
https://tools.ietf.org/html/rfc5785 https://tools.ietf.org/html/rfc5785
Basically /.well-known/ is a place to check for common site meta data and you can suggest new urls that can be registered.
/.well-known/change-password
Has been accepted and added for the use case of pointing to where to change your password.
If you think this is insufficient then there is nothing stopping you from trying to put forward a more comprehensive proposal for say /.well-known/change-password-api that would contain all the meta data for whatever standardized scheme for informing multifactor/username/email api combinations you eventually come up with. Just because /.well-known/change-password exists it does not in any way limit what other suggestions can be made and implimented later (it only means that you need to use a different url).