4 ms·

I like the idea, but it seems to live in a strange in-between niche of people wanting lots of control over their data and content, whilst also being heavily tie

I like the idea, but it seems to live in a strange in-between niche of people wanting lots of control over their data and content, whilst also being heavily tied to a few social media silos. Since I don't use social media, I'm probably not their target audience. I've implemented a few of their microformats on my site ( http://chriswarbo.net http://chriswarbo.net ), but the rest of it seems rather over-engineered without offering much benefit. For example 'indieauth' seems to rely on third parties; this didn't seem too bad when Mozilla Persona was around, but these days it seems like a NotInventedHere alternative to OAuth 'sign in with Twitter'.

epeus 6y ago
Indieauth uses OAuth; there's also tools to delegate auth to silos via RelMeAuth https://indieweb.org/RelMeAuth https://indieweb.org/RelMeAuth
- chriswarbo 6y ago
  Yes, like I say it seems over-engineered for no benefit. For example, why go to all this effort to be "indie", only to end up with this sort of nonsense: http://microformats.org/wiki/web-sign-in http://microformats.org/wiki/web-sign-in > Link from your personal site to your other profiles. Add rel="me" to those hyperlinks. E.g.: > <a rel="me" href="http://twitter.com/your_twitter_alias http://twitter.com/your_twitter_alias">... > When you use your personal site with web sign-in the first time, your browser will redirect you to to your online profile, e.g. Twitter I can dig the markup, but all the user flows and use cases appear to devolve into an unofficial API for Twitter.
  - aaronpk 6y ago
    Check out the actual spec, there's nothing in IndieAuth that relies on third parties. The whole point is so you can authenticate as your own domain to other things. There are some helper services that let you authenticate via Twitter/GitHub in case your website doesn't support IndieAuth natively. https://indieauth.net https://indieauth.net

epeus 6y ago

Indieauth uses OAuth; there's also tools to delegate auth to silos via RelMeAuth https://indieweb.org/RelMeAuth https://indieweb.org/RelMeAuth

chriswarbo 6y ago
Yes, like I say it seems over-engineered for no benefit. For example, why go to all this effort to be "indie", only to end up with this sort of nonsense: http://microformats.org/wiki/web-sign-in http://microformats.org/wiki/web-sign-in > Link from your personal site to your other profiles. Add rel="me" to those hyperlinks. E.g.: > <a rel="me" href="http://twitter.com/your_twitter_alias http://twitter.com/your_twitter_alias">... > When you use your personal site with web sign-in the first time, your browser will redirect you to to your online profile, e.g. Twitter I can dig the markup, but all the user flows and use cases appear to devolve into an unofficial API for Twitter.
- aaronpk 6y ago
  Check out the actual spec, there's nothing in IndieAuth that relies on third parties. The whole point is so you can authenticate as your own domain to other things. There are some helper services that let you authenticate via Twitter/GitHub in case your website doesn't support IndieAuth natively. https://indieauth.net https://indieauth.net