4 ms·

The problem I have with that is that I haven't found decent identity providers last time I checked. Without some decent/proven implementations I'm hesitant to

The problem I have with that is that I haven't found decent identity providers last time I checked. Without some decent/proven implementations I'm hesitant to use it. I don't quite like using Mozilla's service (mostly not because of trust, it just feels half-assed not to go the extra mile and is considered an intermediate workaround/solution even by Mozilla, as far as I know). Without decent options to self host I guess I could implement it myself - but that's a big step. So .. although I'm a fan of the concept, I'm still not using Persona anywhere.

dochtman 13y ago
Have a look at mine: https://bitbucket.org/djc/persona-totp https://bitbucket.org/djc/persona-totp It's less than 150 LOC of Python code (plus some HTML templates and a few basic tests).
- darklajid 13y ago
  Will do, thanks a lot. Since my infrastructure box is mostly python based (radicale, for example) this might fit in nicely.
StavrosK 13y ago
Maybe you'll like the one I made: https://www.persowna.net/ https://www.persowna.net/
- darklajid 13y ago
  I saw your link somewhere else in this thread. I do like the site and I think it's a clever thing to build a service around it. But .. all of your options (well, all affordable ones, all that I even looked at for myself plus family) are hosted, right? I could use my own domain, but you'd be the endpoint? Don't take that the wrong way, but you're not more trustworthy than the Mozilla Foundation.. :) Please correct me if I missed something, but it seems as if you interpreted my self-hosted as 'can use your own domain name', no?
  - StavrosK 13y ago
    Yes, exactly. There are currently other options if you want to be completely self-hosted (and are not a large enterprise that has multiple users and wants a behind-the-firewall option). Persowna is a more featureful/(hopefully) secure option than the default bridge.
wulczer 13y ago
Since everyone is plugging their own: here's a identity provider daemon written in Go: https://github.com/wulczer/persona-idp https://github.com/wulczer/persona-idp It uses my Mail Transfer Agent to identify, so I can just use me email password to log in to Persona-enabled sites, but you can easily swap it out for a different credentials checker.
- darklajid 13y ago
  That's quite cool - actually that'd be exactly what I want to host myself. Not a fan of go (cough The stripe CTF made it again clear that go get isn't exactly what I want, ever), and don't want to build stuff on my box, but I'll certainly check it out. Thanks for chiming in!

dochtman 13y ago

Have a look at mine: https://bitbucket.org/djc/persona-totp https://bitbucket.org/djc/persona-totp It's less than 150 LOC of Python code (plus some HTML templates and a few basic tests).

darklajid 13y ago
Will do, thanks a lot. Since my infrastructure box is mostly python based (radicale, for example) this might fit in nicely.

StavrosK 13y ago

Maybe you'll like the one I made: https://www.persowna.net/ https://www.persowna.net/

darklajid 13y ago
I saw your link somewhere else in this thread. I do like the site and I think it's a clever thing to build a service around it. But .. all of your options (well, all affordable ones, all that I even looked at for myself plus family) are hosted, right? I could use my own domain, but you'd be the endpoint? Don't take that the wrong way, but you're not more trustworthy than the Mozilla Foundation.. :) Please correct me if I missed something, but it seems as if you interpreted my self-hosted as 'can use your own domain name', no?
- StavrosK 13y ago
  Yes, exactly. There are currently other options if you want to be completely self-hosted (and are not a large enterprise that has multiple users and wants a behind-the-firewall option). Persowna is a more featureful/(hopefully) secure option than the default bridge.

wulczer 13y ago

Since everyone is plugging their own: here's a identity provider daemon written in Go: https://github.com/wulczer/persona-idp https://github.com/wulczer/persona-idp It uses my Mail Transfer Agent to identify, so I can just use me email password to log in to Persona-enabled sites, but you can easily swap it out for a different credentials checker.

darklajid 13y ago
That's quite cool - actually that'd be exactly what I want to host myself. Not a fan of go (cough The stripe CTF made it again clear that go get isn't exactly what I want, ever), and don't want to build stuff on my box, but I'll certainly check it out. Thanks for chiming in!