Viewing profile — aaronpk

It refers to the property of FedCM that means nothing about your account is revealed to the website until you click the "Continue As" button. In other words, alternatives to this t…

I wrote a much more narrative version of what this is useful for here: https://aaronparecki.com/2025/05/12/27/enterprise-ready-mcp It isn't exclusive to MCP, it applies to any regu…

"nothing inherently bad" other than: (a list of things that are specifically bad implementations) In my demos the OAuth flow completes so fast you can't even tell it happened, you …

I have chosen to interpret your response as sarcasm

Exactly. Even in a relatively dense location, I have a new automation that runs when my cameras detect a person, both blaring a siren outside as well as notifying me in the house. …

sorry my sarcasm didn't make it through the computer screen

what if data collection as a hobby is the end goal

Discord is just fancy IRC

oh hi. Yes I moved to Libera a while back and am still there regularly.

No it was just a bad take

Check out the actual spec, there's nothing in IndieAuth that relies on third parties. The whole point is so you can authenticate as your own domain to other things. There are some …

ActivityPub by definition doesn't work with a static site. But check out this project which offloads the ActivityPub parts for any site assuming you can make a request there as par…

> edit: Also, why doesn't webmention.io display its own mentions to utilize the two-way communication it advertises? Seems like a no-brainer to show prospective users an example of…

The good news is everyone who receives webmentions can decide what it looks like themselves! In fact you'll see quite a lot of variation in how these are displayed on people's webs…

HN does not as far as I know, but Lobsters does! https://github.com/lobsters/lobsters/pull/535

Don't think of it as comments on blog posts, think of it as enabling entire conversation threads between websites instead of between twitter accounts.

I'd happily accept a PR to the docs! I launched this service in... 2012

I'm having a different (but likely related) problem, which is that my SMTP stopped working today. I have a legacy Google Apps account on a custom domain, and have had two-factor au…

No, you're confusing things again. Your example includes two separate OAuth/OIDC flows. Dropbox as the client to Google, and the camera app as a client to Dropbox.

For those of you wondering how this is different from OpenID Connect: https://indieweb.org/How_is_IndieAuth_different_from_OpenID_...

No picture you see is exactly what came out of the camera. As the author points out at the end of the article, if your camera outputs a jpg image, then it's already made its own de…