> The solution may to be ensure that OIDC itself has a way to log people in based on presenting a private key Isn't that what the OIDC people are trying to ach

> The solution may to be ensure that OIDC itself has a way to log people in based on presenting a private key Isn't that what the OIDC people are trying to achieve with SIOP (Self-Issued OpenID Providers)? The work on that extension to OIDC is a bit new[0], but it seems to share Matrix's goal of decentralisation by letting users have portable identities that aren't dependent on big providers. There is also work to make these SIOP identities integrate with the wider W3C Decentralized Identifiers (DID) ecosystem, through DID-SIOP[1], so that might create some more opportunities for interoperability. [0] https://openid.net/specs/openid-connect-self-issued-v2-1_0.html https://openid.net/specs/openid-connect-self-issued-v2-1_0.h... [1] https://www.didsiop.org/ https://www.didsiop.org/