willow9886

14 ms·

1. 91.▲
   by willow9886 10y ago

   Mike replied to a comment about JWT's on the blog. Figured I'd also add it here for good measure. Feel free to continue the discussion in the comments section of our blog.[1] " JWT's are great. That's why they are u
2. 92.▲
   by willow9886 10y ago

   This is maddening! OpenID Connect is not an extension of OpenID 1 & 2--it is basically a complete re-write!
3. 93.▲
   by willow9886 10y ago

   Thanks for all the upvotes everyone! If you'd like to connect with the author of the blog, Mike Schwartz, feel free to do so on LinkedIn: https://www.linkedin.com/in/nynymike
4. 94.▲
   by willow9886 10y ago

   Sorry! DB crashed. It's back up. Thanks for alerting!
5. 95.▲
   by willow9886 10y ago

   ForgeRock has a pretty comprehensive suite of open source IAM software [1] but you have to buy a subscription before you can put it into production. There's also the open source KeyCloak project from RedHat. [2] Also I believe Connect2
6. 96.▲
   by willow9886 10y ago

   > that is close to okta functionality-wise? The power of OKTA lies in its thousands of pre-configured SSO relationships. It's important to remember that each one was set up manually with a unique client ID and secret, metadata file
7. 97.▲
   by willow9886 10y ago

   True, perhaps worth noting though that in OpenID Connect an RP (website or app) can actually request a specific authentication mechanism using the acr_value (assuming the OP supports multiple authentication mechanisms). This can give the ap
8. 98.▲
   by willow9886 10y ago

   Yubikey implements the FIDO open authentication standard. Yubico, the vendor that produces the Yubikey, is a co-author of the standard. Read this for some background.[1] [1] https://www.yubico.com/about/background/
9. 99.▲
   by willow9886 10y ago

   OK...but Google and my bank still use OTP over SMS to two-factor authenticate me. So clearly there's room for discussion and evangelism here. NIST can say that pigs fly, but until I see it in the wild I'm going to take it with a g
10. 100.▲
    by willow9886 10y ago

    I don't totally agree with this title change. Of course FIDO security keys improve security. What is interesting about this article and the research conducted is the comparative effectiveness of FIDO keys versus the much more widely
11. 101.▲
    by willow9886 10y ago

    There's always going to be a trade off between security, usability, and price. Physical keys are clearly more secure, but also come with increased price and some usability issues (e.g. if you don't have your key you're screwe
12. 102.▲
    by willow9886 10y ago

    > My only complaint is the name of OpenID Connect is simply confusing. Yea..many people only remember the failed OpenID 1 & 2 specs...so, out-of-the-box there is some developer fatigue associated with Connect. However, federation sta
13. 103.▲
    by willow9886 10y ago

    Updated the title to specify SMS OTP.
14. 104.▲
    Google Determines that FIDO U2F Security Keys Improve Security(eweek.com)

    49 points by willow9886 10y ago|68 comments
15. 105.▲
    OAuth vs. SAML vs. OpenID Connect(gluu.co)

    123 points by willow9886 10y ago|68 comments
16. 106.▲
    Can Open Source Companies Be Successful?(hurwitz.com)

    3 points by willow9886 10y ago|0 comments
17. 107.▲
    by willow9886 10y ago

    Thanks, Guy!
18. 108.▲
    by willow9886 10y ago

    What are your thoughts on this statement, Guy?
19. 109.▲
    by willow9886 10y ago

    I agree... it seems that getting the code into peoples hands would be a positive business driver. But once you raise $50m+ in venture capital, all bets are off.
20. 110.▲
    by willow9886 10y ago

    I would encourage anyone who wants a truly open source IDP platform to consider the Gluu Server[1]. The Gluu Server supports open web standards for authentication and authorization, including SAML 2.0, OAuth 2.0, OpenID Connect, UMA, FIDO U
21. 111.▲
    The United Kingdom Authorizes Broad Mass Surveillance on Its Citizens(reason.com)

    32 points by willow9886 10y ago|0 comments
22. 112.▲
    by willow9886 10y ago

    Typo in the "A built-in Q&A engine for community support" section.. publicaly -> publicly.
23. 113.▲
    Action steps in support of standing rock & our universal right to clean water(docs.google.com)

    1 points by willow9886 10y ago|0 comments
24. 114.▲
    Estonian minister signs rules for opening bank account using video bridge(baltic-course.com)

    1 points by willow9886 10y ago|0 comments
25. 115.▲
    Stop letting Big Cable abuse our privacy(battleforthenet.com)

    4 points by willow9886 10y ago|0 comments
26. 116.▲
    by willow9886 10y ago

    Yahoo's been authenticating me nearly every time I try to access the fantasy app on my phone. They've made me change my password 3 times in the past month or so. And the password I set doesn't seem to work, so I keep having t
27. 117.▲
    by willow9886 10y ago

    Yahoo's login experience has been horrible lately. This must be a contributing factor.
28. 118.▲
    by willow9886 10y ago

    This is absolutely horrifying. A few stats at a quick glance... - US is responsible for nearly 1/2 of all gov't requests to Twitter for account info (2,520 / 5,676). 82% of those requests resulted in information being produce
29. 119.▲
    by willow9886 10y ago

    Interesting that another trending story on HN contradicts google's post wrt the privacy features included in allo: http://www.theverge.com/2016/9/21/12994362/allo-privacy-mess... I had a feeling Goo
30. 120.▲
    Is Google getting ready to buy Okta?(gluu.org)

    3 points by willow9886 10y ago|0 comments