Viewing profile — positiveblue

It’s wild, decades of work on least privilege and delegation, and we’re back to handing out root credentials to bots T.T

Adoption is definitely the hardest "cryptographic" problem :D You can think about this as a new auth token to add in your stack. It does not need to grow and take over the world ov…

Wafers are definitely inspired by Macaroons, but the core difference is that delegation is tied to identity. In Macaroons, anyone who holds the token can tack on caveats. In Wafers…

TLDR: JWTs say who you are. Wafers say who this request is on behalf of and exactly what it can do.

I could not give less of a shit between whitelist/allowlist. I use them indistinctly. You can sleep peacefully today but you should try to don't over stress from how other people w…

100% needs to be done at the last mile.

Hi, "this person here" Cloudflare will block that request that has a jwt because "it does not come from a person". What I was trying to say is that even the discussion "is this a b…

many people don't remember/know history though

yep, that's why I am writing this now :) You can see it in the web vs mobile apps. Many people may not see a problem on wallet gardens but reality is that we have much less innovat…

I know the image, what I do not understand is the argument between using it being incompatible with "fairness" and "openness"

No

Where everyone needs a cloudflare account to be able to pay*

> An allowlist run by one company that site owners chose to engage with. Exactly, no problem with that, just hinting that's not a protocol. > But the irony of taking an ideological…

The point is "should everyone just have an account with Cloudflare then"

This is one of the main points :+1:

I actually thought about this before publishing it hahaha Good thing they are not the only place to post!

Narrator: but he did put effort... Anyway, main take aways for you: - We REALLY need a way to tie identity to agent/requests - The idea of registering with cloudflare to be able to…

Giving an agent full access to your data without clear guardrails is a really bad idea. We automate checkouts for e-commerce stores and work with very sensitive information, but ou…

Well, the answer is "I do not know" Now, if I had to guess, this are "a new kind of cookies" so they just took a name that went with it (like they did with biscuits https://www.bis…

Unfortunately, that is so complex and changes so often that should not be implemented at protocol level, but around it. P.S: I feel you :)

Disclaimer: I am the founder of Fewsats, former Lightning Labs employee and owner of the L402.org domain I'd like to clarify a few points and add some context to the discussion. 1)…

Well, paywall her can also mean any subscription or even credits-based system like SaaS or Compute APIs (AI inference for example) not only for content.