#Authentifizierung mit #FIDO2 und #Passkeys karl-voit.at/FIDO2-vs-Passkeys…
Was das ist, warum man es nutzen soll und wie man sie im Vergleich zu anderen Methoden einschätzt.
#MFA #2FA #FIDO #Passkey #Sicherheit #publicvoit
#Authentifizierung mit #FIDO2 und #Passkeys karl-voit.at/FIDO2-vs-Passkeys…
Was das ist, warum man es nutzen soll und wie man sie im Vergleich zu anderen Methoden einschätzt.
#MFA #2FA #FIDO #Passkey #Sicherheit #publicvoit
On weekend I managed to connect all my selfhosted services that support it to the #Keycloak #SSO (single sign on).
Namely #Mastodon #Peertube #NextCloud #FreshRSS #Matomo and #grafana
Why to bother with such complication for apps serving only a couple of users?
First it's quite easy nowadays.
And second, because I want to get rid of passwords and just use #passkeys .
This is one of many examples showing that good apps should just focus on one task and just use standards to cooperate with other apps focusing on other tasks.
Peertube for example focuses on videos, not user management. I am very OK that they don't support passkeys, because they implemented OpenId Connect standard to allow me use Keycloak for better login options.
On the other hand, I am quite sad that SSO is often the one feature, that is proprietary and reserved only for paying customers. SSO is not for huge corporations anymore. It's also usefull for us, selfhosters with couple of users.
❤️
I’ve been on Fedi for a year now and have fallen in love with the platform, so here’s my introduction! I studied computer science with a focus on RTOS and FP/PL, but I’m about to start my final semester of law school. I’ll be practicing at a boutique firm that primarily handles IP cases once I’m barred. I foilboard and I play way too many rhythm games in and out of the arcade.
I contribute to open source projects where I can, and I write up my experience in my digital garden which I’ve been maintaining for over a year now. It’s also a good place to find usage tips for projects/tools that you might want to use.
My passion for tech also includes privacy, and I’m an advocate for minimizing your digital footprint. GenAI is a scam and its purveyors are causing real harm while they sell it as hard as they can.
Follow me for: #selfhosting #digitalgardening #privacy #lawfedi #section230 #copyright #patents #rustlang #gleam #haskell #RSS #neovim #NixOS #zotero #tmux #alacritty #linux #egpu #qemu #arch #archlinux #GNOME #watches #watchmaking #obsidian #obsidianmd #thunderbird #fpv #mechkeys #mechkeeb #mechanicalkeyboard #matrix #signal #fido2 #passkeys #dancerushstardom
Tip You will own nothing, and you will be happy. On my little corner of the internet, I document my adventures in tech and complain about the internet of shit.be-far.com
As we recap our fantastic #EverythingOpen talks, next up is William Brown @firstyear from @SUSE who walks us through #passkeys for #web #authn, showing us their ambiguities, how they work, what their limitations are, and what we need to be thinking about when we implement them.
Another fabulous talk from William.
youtube.com/watch?v=V-7zMIgGO1…
(William Brown) Many people and businesses are starting to talk about Passkeys, Webauthn, FIDO and more. With a veritable tsunami of jargon in the space it c...YouTube