I'm really excited about all the activity in the federated, self-hosted space. However, I feel like there's still a missing piece around identity. I don't want to have to create a new user every time I want to use someone elses shiny new federated event sharing application or what have you.

There don't seem to be any great self hosted OpenID providers out there and OpenID only solves the authentication part anyway. Maybe I've missed some obvious solutions?

@alex a part of this might be solved through Decentralized Identifiers (DIDs) that @cwebber seems to be quite hyped on. But there's no deployable solutions yet AFAIK.

I still don't understand how authentication solves multiple accounts on multiple platforms problem: if I auth into PeerTube instance with my Mastodon account I expect my comment to be published as a reply by my Mastodon account, so PeerTube would just work as an UI for Mastodon but to do so both Mastodon and PeerTube need to support AP's client-server protocol internally between backend and frontend. I don't see another solution...

@zatnosk @alex @cwebber

@alexl @zatnosk @cwebber As I understand that's exactly the problem that DID attempts to address. A DID document describes methods by which an entity can cryptographically prove that they are associated with a DID (w3c-ccg.github.io/did-spec/#au) so service providers like a Mastodon instance or a Peertube instance just have to ask the user to run through that authentication flow. Each instance can then use the DID document to lookup service endpoints like the users home mastodon instance. I think ...

@alex OK, and in my example how PeerTube instance can write in my Mastodon instance the reply without an API? If I need to log into Mastodon to check Mastodon notifications and in PeerTube to check PeerTube notifications I miss the point of cross-platform auth...

@alexl So there's every possibility I am being dumb here as I've only skimmed all the relevant specs but isn't that case already covered by the ActivityPub spec? Can the Peertube instance post to your Mastodon inbox to achieve what you want? Or something along those lines?

Sign in to participate in the conversation

The social network of the future: No ads, no corporate surveillance, ethical design, and decentralization! Own your data with Mastodon!