3 ms·
That /.well-known/change-password redirection is very clever. Easy to implement, and could automate a lot of things (good or bad, obviously it relies on your pa
by franky47 8y ago
That /.well-known/change-password redirection is very clever. Easy to implement, and could automate a lot of things (good or bad, obviously it relies on your password change strategy to be good [0]).
I've only discovered (ironically) the .well-known scoped routes with LetsEncrypt, and more recently with Keybase's validation [1] and security.txt [2], is there a global registry that lists initiatives that make use of this route ?
[0] https://www.troyhunt.com/everything-you-ever-wanted-to-know/ https://www.troyhunt.com/everything-you-ever-wanted-to-know/ (warning, some NSFW content)
[1] https://keybase.io/ https://keybase.io/
[2] https://securitytxt.org/ https://securitytxt.org/
- r3bl 8y agoNextcloud uses it for at least three purposes: /.well-known/carddav (redirects to contacts), /.well-known/caldav (redirects to calendar), /.well-known/webfinger (for discovering users via ActivityPub).
- ilikepi 8y agoIANA maintains a registry[1], but there are some notable absences. Your change-password is one example. Apple has at least one[2] and probably more URIs coded into Safari that aren't listed. [1]: https://www.iana.org/assignments/well-known-uris/well-known-uris.xhtml https://www.iana.org/assignments/well-known-uris/well-known-... [2]: https://developer.apple.com/library/archive/documentation/General/Conceptual/AppSearch/UniversalLinks.html https://developer.apple.com/library/archive/documentation/Ge... EDIT: typo