34 ms·
Thank you for providing a link to try it out :) I like it a lot, but at the end of the day I'm still relying on a single company to hold the keys to many accou
by basicallydan 14y ago
Thank you for providing a link to try it out :)
I like it a lot, but at the end of the day I'm still relying on a single company to hold the keys to many accounts of mine on the web, which is still a bit jarring (not that it's going to stop me).
- callahad 14y ago> at the end of the day I'm still relying on a single company to hold the keys to many accounts Actually, with Persona, you're not. :) Persona has a fully decentralized architecture. The centralization you're seeing right now is completely temporary, and only serves as a bootstrapping convenience. If you own your own domain you can turn it into a Persona Identity Provider and start minting your own identity certificates today, without Mozilla (or any other single company) being forced into the trust path.
- basicallydan 14y agoAha, it's for Bootstrapping! Awesome, good to hear. I saw the thing about Identity Providers and got excited, but then I logged in and was like... aww.. So, hopefully Google will be doing it soon with Gmail/Google Apps!
- callahad 14y agoWe're going to build a Persona <-> Gmail OpenID bridge soon. Probably launching in May or June. It'll almost be like Google supports it directly. :) After that will come Google Apps support.
- basicallydan 14y agoYou, sir, are a gentleman and a scholar. I'll submit a feature request to Spotify to get them to support Persona log in. When Gmail and Spotify are gone I'll be two big steps closer to getting rid of that pesky Facebook account ;)
- StavrosK 14y agoWhy, do you have an @spotify.com email address? :P
- StavrosK 14y agoYeah but your bridge will still know where I log in, no? I mean, it's great, but it would be even greater if Google supported it natively.
- AndrewDucker 14y agoHopefully Google will do so - and then the bridge can be turned off!
- StavrosK 14y agoHear, hear. EDIT: Oh, can I help beta test it?
- callahad 14y agoWe wouldn't even have to turn it off -- as soon as gmail.com can vouch for its own users, the protocol automatically and preferentially switches over to that. The centralized parts fall away on their own whenever they can. :)
- callahad 14y agoActually, it won't. You'll OpenID auth into google.login.persona.org, and then get a straight up Persona certificate signed by that fallback, along with all of the privacy safeguards that has.
- StavrosK 14y agoOh, very nice. Is there a way to get in the beta?
- callahad 14y agoHonestly, we haven't quite figured out a good way to do a "beta" or partial roll-out for this without breaking other users. Yaaaay decentralization! Instead, we'll be extensively QA'ing it in testing environments, and then we'll flip a big switch to enable it for everyone.