You could use OpenPubkey [0] to bind your identity key to your say Google or Okta account. With an MFA Cosigner, a malicious Google wouldn't be able to imperson

You could use OpenPubkey [0] to bind your identity key to your say Google or Okta account. With an MFA Cosigner, a malicious Google wouldn't be able to impersonate you. IF you really wanted to go full cipherpunk, you could use the stuff risc.zero [1] is building to could keep your identity secret via ZKPs on your ID Token. [0]: OpenPubkey: Augmenting OpenID Connect with User held Signing Keys, Paper: https://eprint.iacr.org/2023/296 https://eprint.iacr.org/2023/296 Code: https://github.com/openpubkey/openpubkey https://github.com/openpubkey/openpubkey [1]: "Under the hood is JWT and OIDC verification on top of the RISC Zero zkVM" https://www.risczero.com/news/bonsai-pay https://www.risczero.com/news/bonsai-pay